CVE-2018-18894: Path Traversal
Published Mar 10, 2020
·Updated
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Affected Software
98 affected components
Lexmark 6500e Firmware<lhs60.jr.p683
Lexmark 6500e
Lexmark C748 Firmware<lhs60.cm4.p683
Lexmark C748
Lexmark C79x Firmware<lhs60.hc.p683
Lexmark C79x
Lexmark C925 Firmware<lhs60.hv.p683
Lexmark C925
Lexmark C95x Firmware<lhs60.tp.p683
Lexmark C95x
Lexmark Cs41x Firmware<lw71.vy2.p216
Lexmark CS41x
Lexmark Cs51x Firmware<lw71.vy4.p216
Lexmark CS51x
Lexmark Cs748 Firmware<=lhs60.cm4.p683
Lexmark CS748
Lexmark Cs796 Firmware<lhs60.hc.p683
Lexmark CS796
Lexmark Cx410 Firmware<lw71.gm4.p216
Lexmark CX410
Lexmark Cx510 Firmware<lw71.gm7.p216
Lexmark CX510
Lexmark M3150 Firmware<lw71.pr4.p216
Lexmark M3150
Lexmark M5155 Firmware<lw71.dn4.p216
Lexmark M5155
Lexmark M5163 Firmware<lw71.dn4.p216
Lexmark M5163
Lexmark M5170 Firmware<lw71.dn7.p216
Lexmark M5170
Lexmark Ms610de Firmware<lw71.pr4.p216
Lexmark MS610de
Lexmark Ms610dte Firmware<lw71.pr4.p216
Lexmark Ms610dte
Lexmark Ms810de Firmware<lw71.dn4.p216
Lexmark MS810de
Lexmark Ms812de Firmware<lw71.dn7.p216
Lexmark MS812de
Lexmark Ms91x Firmware<lw71.sa.p216
Lexmark MS91x
Lexmark Mx410 Firmware<lw71.sb4.p216
Lexmark MX410
Lexmark Mx510 Firmware<lw71.sb4.p216
Lexmark MX510
Lexmark Mx511 Firmware<lw71.sb4.p216
Lexmark MX511
Lexmark Mx610 Firmware<lw71.sb7.p216
Lexmark MX610
Lexmark Mx611 Firmware<lw71.sb7.p216
Lexmark MX611
Lexmark Mx6500e Firmware<=lw71.jd.p216
Lexmark MX6500e
Lexmark Mx71x Firmware<lw71.tu.p216
Lexmark MX71x
Lexmark Mx81x Firmware<lw71.tu.p216
Lexmark MX81x
Lexmark Mx91x Firmware<lw71.mg.p216
Lexmark MX91x
Lexmark Sm91x Firmware<lw71.mg.p216
Lexmark Sm91x
Lexmark X46x Firmware<lr.bs.p810
Lexmark X46x
Lexmark X548 Firmware<lhs60.vk.p683
Lexmark X548
Lexmark X65x Firmware<lr.mn.p810
Lexmark X65x
Lexmark X73x Firmware<lr.fl.p810
Lexmark X73x
Lexmark X74x Firmware<lhs60.ny.p683
Lexmark X74x
Lexmark X792 Firmware<lhs60.mr.p683
Lexmark X792
Lexmark X86x Firmware<lr.sp.p810
Lexmark X86x
Lexmark X925 Firmware<lhs60.hk.p683
Lexmark X925
Lexmark X95x Firmware<lhs60.tq.p683
Lexmark X95x
Lexmark Xc2132 Firmware<lw71.gm7.p216
Lexmark XC2132
Lexmark Xm1145 Firmware<lw71.sb4.p216
Lexmark XM1145
Lexmark Xm3150 Firmware<lw71.sb7.p216
Lexmark XM3150
Lexmark Xm51xx Firmware<lw71.tu.p216
Lexmark XM51xx
Lexmark Xm71xx Firmware<lw71.tu.p216
Lexmark XM71xx
Lexmark Xs478 Firmware<lhs60.ny.p683
Lexmark Xs478
Lexmark Xs548 Firmware<lhs60.vk.p683
Lexmark XS548
Lexmark Xs79x Firmware<lhs60.mr.p683
Lexmark XS79x
Lexmark Xs925 Firmware<lhs60.hk.p683
Lexmark XS925
Lexmark Xs95x Firmware<lhs60.tq.p683
Lexmark XS95x
Event History
Mar 10, 2020
CVE Published
via MITRE·12:50 PM
Data Sourced
via MITRE·12:50 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18894?
CVE-2018-18894 has been assigned a medium severity rating due to its directory traversal vulnerability.
2
How do I fix CVE-2018-18894?
To fix CVE-2018-18894, update the firmware of the affected Lexmark devices to the most recent version available.
3
What devices are affected by CVE-2018-18894?
CVE-2018-18894 affects older Lexmark devices such as the C, M, X series and the 6500e model prior to December 18, 2018.
4
What are the potential impacts of CVE-2018-18894?
The potential impacts of CVE-2018-18894 include unauthorized access to sensitive files and information on the affected Lexmark devices.
5
Is there a workaround for CVE-2018-18894?
A possible workaround for CVE-2018-18894 is to restrict access to the embedded web server by utilizing network firewall rules.