CVE-2011-4538

published 2020-03-09

CVE-2011-4538: Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Priority P4 22 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Affected

33 ranges · showing 25

Vendor	Product	Version range	Fixed in
lexmark	c540_firmware	<= ll.as.p511	—
lexmark	c543_firmware	<= ll.as.p511	—
lexmark	c544_firmware	<= ll.as.p511	—
lexmark	c546_firmware	<= lu.as.p511	—
lexmark	c734_firmware	<= lr.sk.p224a	—
lexmark	c736_firmware	<= lr.sk.p224a	—
lexmark	e260_firmware	<= ll.lbl.p511	—
lexmark	e360_firmware	<= ll.lbm.p511	—
lexmark	e460_firmware	<= lr.lbh.p224a	—
lexmark	e462_firmware	<= lr.lbh.p224a	—
lexmark	t650_firmware	<= lr.jp.p224a	—
lexmark	t652_firmware	<= lr.jp.p224a	—
lexmark	t654_firmware	<= lr.jp.p224a	—
lexmark	w850_firmware	<= lp.jb.p108	—
lexmark	x363_firmware	<= ll.bz.p511	—
lexmark	x364_firmware	<= ll.bz.p511	—
lexmark	x463_firmware	<= lr.bs.p224a	—
lexmark	x464_firmware	<= lr.bs.p224a	—
lexmark	x466_firmware	<= lr.bs.p224a	—
lexmark	x543_firmware	<= ll.el.p511	—
lexmark	x544_firmware	<= ll.el.p511	—
lexmark	x546_firmware	<= ll.el.p511	—
lexmark	x651_firmware	<= lr.mn.p224a	—
lexmark	x652_firmware	<= lr.mn.p224a	—
lexmark	x654_firmware	<= lr.mn.p224a	—

CVSS provenance

nvd v3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200