high7.5
CVE-2018-18894
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Impact
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lexmark | 6500e Firmware | before lhs60.jr.p683 |
| Lexmark | C748 Firmware | before lhs60.cm4.p683 |
| Lexmark | C79x Firmware | before lhs60.hc.p683 |
| Lexmark | C925 Firmware | before lhs60.hv.p683 |
| Lexmark | C95x Firmware | before lhs60.tp.p683 |
| Lexmark | Cs41x Firmware | before lw71.vy2.p216 |
| Lexmark | Cs51x Firmware | before lw71.vy4.p216 |
| Lexmark | Cs748 Firmware | through lhs60.cm4.p683 |
| Lexmark | Cs796 Firmware | before lhs60.hc.p683 |
| Lexmark | Cx410 Firmware | before lw71.gm4.p216 |
| Lexmark | Cx510 Firmware | before lw71.gm7.p216 |
| Lexmark | M3150 Firmware | before lw71.pr4.p216 |