CVE-2013-6033
Low
Description
Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field.
SeverityLow
CVSS3.5
Exploit probability—
ProductLexmark C52x
PublishedFeb 4, 2014
First seenFeb 4, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lexmark c52x | v ≤ ls.fa.p150 | — |
| lexmark c53x | v ≤ ls.sw.p069 | — |
| lexmark c920 | v ≤ ls.ta.p152 | — |
| lexmark c935dn | v ≤ lc.jo.p091 | — |
| lexmark e250 | v ≤ le.pm.p126 | — |
| lexmark e350 | v ≤ le.ph.p129 | — |
| lexmark e450 | v ≤ lm.sz.p124 | — |
| lexmark t64x | v ≤ ls.st.p343 | — |
| lexmark w840 | v ≤ ls.ha.p252 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.