NetSight
IP …
low3.5

CVE-2013-6033

Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P…

Impact

Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field.

Affected products

VendorProductAffected versions
LexmarkC52x
through ls.fa.p150
LexmarkC53x
through ls.sw.p069
LexmarkC920
through ls.ta.p152
LexmarkC935dn
through lc.jo.p091
LexmarkE250
through le.pm.p126
LexmarkE350
through le.ph.p129
LexmarkE450
through lm.sz.p124
LexmarkT64x
through ls.st.p343
LexmarkW840
through ls.ha.p252

Weakness classification

CWE-79

References