CVE-2020-10093

published 2020-04-28

CVE-2020-10093: A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.

Priority P4 22 medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.

Affected

80 ranges · showing 25

Vendor	Product	Version range	Fixed in
lexmark	6500e_firmware	<= lhs60.jr.p737	—
lexmark	c734_firmware	<= lr.sk.p824	—
lexmark	c736_firmware	<= lr.ske.p824	—
lexmark	c746_firmware	<= lhs60.cm2.p737	—
lexmark	c748_firmware	<= lhs60.cm4.p737	—
lexmark	c792_firmware	<= lhs60.hc.p737	—
lexmark	c925_firmware	<= lhs60.hv.p737	—
lexmark	c950_firmware	<= lhs60.tp.p737	—
lexmark	cs31x_firmware	<= lw74.vyl.p272	—
lexmark	cs41x_firmware	<= lw74.vy2.p272	—
lexmark	cs51x_firmware	<= lw74.vy4.p272	—
lexmark	cs748_firmware	<= lhs60.cm4.p737	—
lexmark	cs796_firmware	<= lhs60.hc.p737	—
lexmark	cx310_firmware	<= lw74.gm2.p272	—
lexmark	cx410_firmware	<= lw74.gm4.p272	—
lexmark	cx510_firmware	<= lw74.gm7.p272	—
lexmark	e46x_firmware	<= lr.lbh.p824	—
lexmark	m1140_firmware	<= lw74.prl.p272	—
lexmark	m1145_firmware	<= lw74.pr2.p272	—
lexmark	m3150_firmware	<= lw74.pr4.p272	—
lexmark	m3150dn_firmware	<= lw74.pr2.p272	—
lexmark	m5155_firmware	<= lw74.dn4.p272	—
lexmark	m5163_firmware	<= lw74.dn4.p272	—
lexmark	m5163dn_firmware	<= lw74.dn2.p272	—
lexmark	m5170_firmware	<= lw74.dn7.p272	—

CVSS provenance

nvd v3.1 5.4 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

nvd v2.0 3.5 LOW AV:N/AC:M/Au:S/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79