{"cve":"CVE-2018-18894","nvd":{"published":"2020-03-10T13:15:12.330","modified":"2026-06-17T01:48:05.833","status":"Modified","description":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5},"cwes":["CWE-22"],"references":["http://support.lexmark.com/alerts","http://support.lexmark.com/index?page=content&id=TE906&locale=EN&userlocale=EN_US","http://support.lexmark.com/alerts","http://support.lexmark.com/index?page=content&id=TE906&locale=EN&userlocale=EN_US"],"products":["lexmark:6500e_firmware","lexmark:c748_firmware","lexmark:c79x_firmware","lexmark:c925_firmware","lexmark:c95x_firmware","lexmark:cs41x_firmware","lexmark:cs51x_firmware","lexmark:cs748_firmware","lexmark:cs796_firmware","lexmark:cx410_firmware","lexmark:cx510_firmware","lexmark:m3150_firmware","lexmark:m5155_firmware","lexmark:m5163_firmware","lexmark:m5170_firmware","lexmark:ms610de_firmware","lexmark:ms610dte_firmware","lexmark:ms810de_firmware","lexmark:ms812de_firmware","lexmark:ms91x_firmware","lexmark:mx410_firmware","lexmark:mx510_firmware","lexmark:mx511_firmware","lexmark:mx610_firmware","lexmark:mx611_firmware","lexmark:mx6500e_firmware","lexmark:mx71x_firmware","lexmark:mx81x_firmware","lexmark:mx91x_firmware","lexmark:sm91x_firmware","lexmark:x46x_firmware","lexmark:x548_firmware","lexmark:x65x_firmware","lexmark:x73x_firmware","lexmark:x74x_firmware","lexmark:x792_firmware","lexmark:x86x_firmware","lexmark:x925_firmware","lexmark:x95x_firmware","lexmark:xc2132_firmware","lexmark:xm1145_firmware","lexmark:xm3150_firmware","lexmark:xm51xx_firmware","lexmark:xm71xx_firmware","lexmark:xs478_firmware","lexmark:xs548_firmware","lexmark:xs79x_firmware","lexmark:xs925_firmware","lexmark:xs95x_firmware"],"source":"nvd","synced_at":"2026-10-19T21:02:53.949909883+00:00"},"epss":{"cve":"CVE-2018-18894","score":0.01655,"percentile":0.76579,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}