CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2018-18894
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lexmark:6500e_firmware
- lexmark:c748_firmware
- lexmark:c79x_firmware
- lexmark:c925_firmware
- lexmark:c95x_firmware
- lexmark:cs41x_firmware
- lexmark:cs51x_firmware
- lexmark:cs748_firmware
- lexmark:cs796_firmware
- lexmark:cx410_firmware
- lexmark:cx510_firmware
- lexmark:m3150_firmware
- lexmark:m5155_firmware
- lexmark:m5163_firmware
- lexmark:m5170_firmware
- lexmark:ms610de_firmware
- lexmark:ms610dte_firmware
- lexmark:ms810de_firmware
- lexmark:ms812de_firmware
- lexmark:ms91x_firmware
- lexmark:mx410_firmware
- lexmark:mx510_firmware
- lexmark:mx511_firmware
- lexmark:mx610_firmware
- lexmark:mx611_firmware
- lexmark:mx6500e_firmware
- lexmark:mx71x_firmware
- lexmark:mx81x_firmware
- lexmark:mx91x_firmware
- lexmark:sm91x_firmware
- lexmark:x46x_firmware
- lexmark:x548_firmware
- lexmark:x65x_firmware
- lexmark:x73x_firmware
- lexmark:x74x_firmware
- lexmark:x792_firmware
- lexmark:x86x_firmware
- lexmark:x925_firmware
- lexmark:x95x_firmware
- lexmark:xc2132_firmware
- lexmark:xm1145_firmware
- lexmark:xm3150_firmware
- lexmark:xm51xx_firmware
- lexmark:xm71xx_firmware
- lexmark:xs478_firmware
- lexmark:xs548_firmware
- lexmark:xs79x_firmware
- lexmark:xs925_firmware
- lexmark:xs95x_firmware