CVE Feed

    Dashboard / CVE / CVE-2018-18894

    CVE-2018-18894

    Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.

    Published:Mar 10, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 10, 2020
    EPSS Score:0.00271
    CVSS Score:7.5

    Affected Products

    Vendor
    Lexmark
    Product
    6500e
    Vendor
    Lexmark
    Product
    6500e Firmware
    Vendor
    Lexmark
    Product
    C748
    Vendor
    Lexmark
    Product
    C748 Firmware
    Vendor
    Lexmark
    Product
    C79x
    Vendor
    Lexmark
    Product
    C79x Firmware
    Vendor
    Lexmark
    Product
    C925
    Vendor
    Lexmark
    Product
    C925 Firmware
    Vendor
    Lexmark
    Product
    C95x
    Vendor
    Lexmark
    Product
    C95x Firmware
    Vendor
    Lexmark
    Product
    Cs41x
    Vendor
    Lexmark
    Product
    Cs41x Firmware
    Vendor
    Lexmark
    Product
    Cs51x
    Vendor
    Lexmark
    Product
    Cs51x Firmware
    Vendor
    Lexmark
    Product
    Cs748
    Vendor
    Lexmark
    Product
    Cs748 Firmware
    Vendor
    Lexmark
    Product
    Cs796
    Vendor
    Lexmark
    Product
    Cs796 Firmware
    Vendor
    Lexmark
    Product
    Cx410
    Vendor
    Lexmark
    Product
    Cx410 Firmware
    Vendor
    Lexmark
    Product
    Cx510
    Vendor
    Lexmark
    Product
    Cx510 Firmware
    Vendor
    Lexmark
    Product
    M3150
    Vendor
    Lexmark
    Product
    M3150 Firmware
    Vendor
    Lexmark
    Product
    M5155
    Vendor
    Lexmark
    Product
    M5155 Firmware
    Vendor
    Lexmark
    Product
    M5163
    Vendor
    Lexmark
    Product
    M5163 Firmware
    Vendor
    Lexmark
    Product
    M5170
    Vendor
    Lexmark
    Product
    M5170 Firmware
    Vendor
    Lexmark
    Product
    Ms610de
    Vendor
    Lexmark
    Product
    Ms610de Firmware
    Vendor
    Lexmark
    Product
    Ms610dte
    Vendor
    Lexmark
    Product
    Ms610dte Firmware
    Vendor
    Lexmark
    Product
    Ms810de
    Vendor
    Lexmark
    Product
    Ms810de Firmware
    Vendor
    Lexmark
    Product
    Ms812de
    Vendor
    Lexmark
    Product
    Ms812de Firmware
    Vendor
    Lexmark
    Product
    Ms91x
    Vendor
    Lexmark
    Product
    Ms91x Firmware
    Vendor
    Lexmark
    Product
    Mx410
    Vendor
    Lexmark
    Product
    Mx410 Firmware
    Vendor
    Lexmark
    Product
    Mx510
    Vendor
    Lexmark
    Product
    Mx510 Firmware
    Vendor
    Lexmark
    Product
    Mx511
    Vendor
    Lexmark
    Product
    Mx511 Firmware
    Vendor
    Lexmark
    Product
    Mx610
    Vendor
    Lexmark
    Product
    Mx610 Firmware
    Vendor
    Lexmark
    Product
    Mx611
    Vendor
    Lexmark
    Product
    Mx611 Firmware
    Vendor
    Lexmark
    Product
    Mx6500e
    Vendor
    Lexmark
    Product
    Mx6500e Firmware
    Vendor
    Lexmark
    Product
    Mx71x
    Vendor
    Lexmark
    Product
    Mx71x Firmware
    Vendor
    Lexmark
    Product
    Mx81x
    Vendor
    Lexmark
    Product
    Mx81x Firmware
    Vendor
    Lexmark
    Product
    Mx91x
    Vendor
    Lexmark
    Product
    Mx91x Firmware
    Vendor
    Lexmark
    Product
    Sm91x
    Vendor
    Lexmark
    Product
    Sm91x Firmware
    Vendor
    Lexmark
    Product
    X46x
    Vendor
    Lexmark
    Product
    X46x Firmware
    Vendor
    Lexmark
    Product
    X548
    Vendor
    Lexmark
    Product
    X548 Firmware
    Vendor
    Lexmark
    Product
    X65x
    Vendor
    Lexmark
    Product
    X65x Firmware
    Vendor
    Lexmark
    Product
    X73x
    Vendor
    Lexmark
    Product
    X73x Firmware
    Vendor
    Lexmark
    Product
    X74x
    Vendor
    Lexmark
    Product
    X74x Firmware
    Vendor
    Lexmark
    Product
    X792
    Vendor
    Lexmark
    Product
    X792 Firmware
    Vendor
    Lexmark
    Product
    X86x
    Vendor
    Lexmark
    Product
    X86x Firmware
    Vendor
    Lexmark
    Product
    X925
    Vendor
    Lexmark
    Product
    X925 Firmware
    Vendor
    Lexmark
    Product
    X95x
    Vendor
    Lexmark
    Product
    X95x Firmware
    Vendor
    Lexmark
    Product
    Xc2132
    Vendor
    Lexmark
    Product
    Xc2132 Firmware
    Vendor
    Lexmark
    Product
    Xm1145
    Vendor
    Lexmark
    Product
    Xm1145 Firmware
    Vendor
    Lexmark
    Product
    Xm3150
    Vendor
    Lexmark
    Product
    Xm3150 Firmware
    Vendor
    Lexmark
    Product
    Xm51xx
    Vendor
    Lexmark
    Product
    Xm51xx Firmware
    Vendor
    Lexmark
    Product
    Xm71xx
    Vendor
    Lexmark
    Product
    Xm71xx Firmware
    Vendor
    Lexmark
    Product
    Xs478
    Vendor
    Lexmark
    Product
    Xs478 Firmware
    Vendor
    Lexmark
    Product
    Xs548
    Vendor
    Lexmark
    Product
    Xs548 Firmware
    Vendor
    Lexmark
    Product
    Xs79x
    Vendor
    Lexmark
    Product
    Xs79x Firmware
    Vendor
    Lexmark
    Product
    Xs925
    Vendor
    Lexmark
    Product
    Xs925 Firmware
    Vendor
    Lexmark
    Product
    Xs95x
    Vendor
    Lexmark
    Product
    Xs95x Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-26065 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Integer Overflow.…
    CVE-2023-26063 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.…
    CVE-2023-26070 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).…
    CVE-2023-26064 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.…
    CVE-2023-26066 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.…
    CVE-2021-44734 (CVSS 9.8) — Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which ca…
    CVE-2021-44737 (CVSS 8.8) — PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite…
    CVE-2021-44738 (CVSS 9.8) — Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpre…
    CVE-2020-10093 (CVSS 5.4) — A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.…
    CVE-2020-10094 (CVSS 5.4) — A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High