CVE-2011-4538

Medium

Description

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

SeverityMedium
CVSS5.3
Exploit probability—
ProductLexmark X860 Firmware
PublishedMar 9, 2020
First seenMar 9, 2020

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
lexmark x860_firmwarev ≤ lp.sp.p108—
lexmark x862_firmwarev ≤ lp.sp.p108—
lexmark x864_firmwarev ≤ lp.sp.p108—
lexmark x734_firmwarev ≤ lr.fl.p224c—
lexmark x736_firmwarev ≤ lr.fl.p224c—
lexmark x738_firmwarev ≤ lr.fl.p224c—
lexmark x651_firmwarev ≤ lr.mn.p224a—
lexmark x652_firmwarev ≤ lr.mn.p224a—
lexmark x654_firmwarev ≤ lr.mn.p224a—
lexmark x656_firmwarev ≤ lr.mn.p224a—
lexmark x658_firmwarev ≤ lr.mn.p224a—
lexmark x543_firmwarev ≤ ll.el.p511—
lexmark x544_firmwarev ≤ ll.el.p511—
lexmark x546_firmwarev ≤ ll.el.p511—
lexmark x463_firmwarev ≤ lr.bs.p224a—
lexmark x464_firmwarev ≤ lr.bs.p224a—
lexmark x466_firmwarev ≤ lr.bs.p224a—
lexmark x363_firmwarev ≤ ll.bz.p511—
lexmark x364_firmwarev ≤ ll.bz.p511—
lexmark w850_firmwarev ≤ lp.jb.p108—
lexmark t650_firmwarev ≤ lr.jp.p224a—
lexmark t652_firmwarev ≤ lr.jp.p224a—
lexmark t654_firmwarev ≤ lr.jp.p224a—
lexmark e460_firmwarev ≤ lr.lbh.p224a—
lexmark e462_firmwarev ≤ lr.lbh.p224a—
lexmark e360_firmwarev ≤ ll.lbm.p511—
lexmark e260_firmwarev ≤ ll.lbl.p511—
lexmark c734_firmwarev ≤ lr.sk.p224a—
lexmark c736_firmwarev ≤ lr.sk.p224a—
lexmark c546_firmwarev ≤ lu.as.p511—
lexmark c540_firmwarev ≤ ll.as.p511—
lexmark c543_firmwarev ≤ ll.as.p511—
lexmark c544_firmwarev ≤ ll.as.p511—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.