lexmark Vulnerability Advisory Catalog

Total 66 security vulnerabilities recorded for lexmark software and firmware.

← Back to All Vendors
CVE-2011-4538 MEDIUM
Component: x860_firmware

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings....

📅 2020-03-09
CVSS 5.3 Dossier →
Component: x950_firmware

Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan...

📅 2020-03-09
CVSS 7.5 Dossier →
CVE-2016-6918 CRITICAL
Component: markvision_enterprise

Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (...

📅 2020-03-09
CVSS 9.8 Dossier →
Component: cs31x_firmware

Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http:...

📅 2020-03-06
CVSS 5.4 Dossier →
Component: cs31x_firmware

Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in ht...

📅 2020-03-06
CVSS 5.4 Dossier →
Component: cx31x_firmware

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can ...

📅 2020-02-13
CVSS 5.4 Dossier →
Component: markvision_enterprise

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arb...

📅 2020-01-27
CVSS 7.5 Dossier →
CVE-2014-8741 CRITICAL
Component: markvision_enterprise

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write t...

📅 2020-01-27
CVSS 9.8 Dossier →
Component: services_monitor_firmware

In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2...

📅 2019-11-21
CVSS 7.5 Dossier →
CVE-2019-9933 CRITICAL
Component: cs31x_firmware

Various Lexmark products have a Buffer Overflow (issue 3 of 3)....

📅 2019-08-28
CVSS 9.8 Dossier →
CVE-2019-9932 CRITICAL
Component: cs31x_firmware

Various Lexmark products have a Buffer Overflow (issue 2 of 3)....

📅 2019-08-28
CVSS 9.8 Dossier →
Component: cs31x_firmware

Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device....

📅 2019-08-28
CVSS 7.5 Dossier →
CVE-2019-9930 CRITICAL
Component: cs31x_firmware

Various Lexmark products have an Integer Overflow....

📅 2019-08-28
CVSS 9.8 Dossier →
Component: cs31x_firmware

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices....

📅 2019-08-28
CVSS 5.3 Dossier →
Component: cs31x_firmware

Various Lexmark products have CSRF....

📅 2019-08-28
CVSS 6.5 Dossier →
CVE-2019-9935 MEDIUM
Component: cs31x_firmware

Various Lexmark products have Incorrect Access Control (issue 2 of 2)....

📅 2019-08-28
CVSS 5.3 Dossier →
CVE-2019-9934 MEDIUM
Component: cs31x_firmware

Various Lexmark products have Incorrect Access Control (issue 1 of 2)....

📅 2019-08-28
CVSS 5.3 Dossier →
CVE-2019-10058 CRITICAL
Component: cs31x_firmware

Various Lexmark products have Incorrect Access Control....

📅 2019-08-28
CVSS 9.1 Dossier →
CVE-2018-15519 CRITICAL
Component: cx310_firmware

Various Lexmark devices have a Buffer Overflow (issue 1 of 2)....

📅 2019-06-28
CVSS 9.8 Dossier →
CVE-2018-15520 CRITICAL
Component: cx82x_firmware

Various Lexmark devices have a Buffer Overflow (issue 2 of 2)....

📅 2019-06-28
CVSS 9.8 Dossier →
Component: cx725h_firmware

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing t...

📅 2019-03-12
CVSS 4.9 Dossier →
CVE-2019-6489 MEDIUM
Component: xm5163_firmware

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts....

📅 2019-02-11
CVSS 5.3 Dossier →
CVE-2017-13771 CRITICAL
Component: scan_to_network

Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows rem...

📅 2017-09-07
CVSS 9.8 Dossier →
Component: perceptive_document_filters

An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specific...

📅 2017-09-05
CVSS 7.5 Dossier →
Page 2 of 3 (66 Total Records)