medium
5.4
CWE
79
Advisory Published
Updated

CVE-2020-10094: XSS

First published: Tue Apr 28 2020(Updated: )

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 before LW74.PRL.P273; MS315, MS415, MS417 before LW74.TL2.P273; MS51x, MS610dn, MS617 before LW74.PR2.P273; M1145, M3150dn before LW74.PR2.P273; MS610de, M3150 before LW74.PR4.P273; MS71x,M5163dn before LW74.DN2.P273; MS810, MS811, MS812, MS817, MS818 before LW74.DN2.P273; MS810de, M5155, M5163 before LW74.DN4.P273; MS812de, M5170 before LW74.DN7.P273; MS91x before LW74.SA.P273; MX31x, XM1135 before LW74.SB2.P273; MX410, MX510 & MX511 before LW74.SB4.P273; XM1140, XM1145 before LW74.SB4.P273; MX610 & MX611 before LW74.SB7.P273; XM3150 before LW74.SB7.P273; MX71x, MX81x before LW74.TU.P273; XM51xx & XM71xx before LW74.TU.P273; MX91x & XM91x before LW74.MG.P273; MX6500e before LW74.JD.P273; C746 before LHS60.CM2.P738; C748, CS748 before LHS60.CM4.P738; C792, CS796 before LHS60.HC.P738; C925 before LHS60.HV.P738; C950 before LHS60.TP.P738; X548 & XS548 before LHS60.VK.P738; X74x & XS748 before LHS60.NY.P738; X792 & XS79x before LHS60.MR.P738; X925 & XS925 before LHS60.HK.P738; X95x & XS95x before LHS60.TQ.P738; 6500e before LHS60.JR.P738;C734 LR.SK.P824 and earlier; C736 LR.SKE.P824 and earlier; E46x LR.LBH.P824 and earlier; T65x LR.JP.P824 and earlier; X46x LR.BS.P824 and earlier; X65x LR.MN.P824 and earlier; X73x LR.FL.P824 and earlier; W850 LP.JB.P823 and earlier; and X86x LP.SP.P823 and earlier.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Lexmark Cs31x Firmware<=lw74.vyl.p272
Lexmark CS31x
Lexmark Cs41x Firmware<=lw74.vy2.p272
Lexmark Cs41x
Lexmark Cs51x Firmware<=lw74.vy4.p272
Lexmark Cs51x
Lexmark Cx310 Firmware<=lw74.gm2.p272
Lexmark Cx310
Lexmark Cx410 Firmware<=lw74.gm4.p272
Lexmark CX Series
Lexmark Xc2130 Firmware<=lw74.gm4.p272
Lexmark Xc2130
Lexmark Cx510 Firmware<=lw74.gm7.p272
Lexmark CX Series
Lexmark Xc2132 Firmware<=lw74.gm7.p272
Lexmark Xc2132
Lexmark Ms310 Firmware<=lw74.prl.p272
Lexmark Ms310
Lexmark Ms312 Firmware<=lw74.prl.p272
Lexmark Ms312
Lexmark Ms317 Firmware<=lw74.prl.p272
Lexmark Ms317
Lexmark Ms410 Firmware<=lw74.prl.p272
Lexmark Ms410
Lexmark M1140 Firmware<=lw74.prl.p272
Lexmark M1140
Lexmark Ms315 Firmware<=lw74.tl2.p272
Lexmark Ms315
Lexmark Ms415 Firmware<=lw74.tl2.p272
Lexmark Ms415
Lexmark Ms417 Firmware<=lw74.tl2.p272
Lexmark Ms417
Lexmark Ms51x Firmware<=lw74.pr2.p272
Lexmark Ms51x
Lexmark Ms610dn Firmware<=lw74.pr2.p272
Lexmark Ms610dn
Lexmark Ms617 Firmware<=lw74.pr2.p272
Lexmark Ms617
Lexmark M1145 Firmware<=lw74.pr2.p272
Lexmark M1145
Lexmark M3150dn Firmware<=lw74.pr2.p272
Lexmark M3150dn
Lexmark Ms610de Firmware<=lw74.pr4.p272
Lexmark Ms610de
Lexmark M3150 Firmware<=lw74.pr4.p272
Lexmark M3150
Lexmark Ms71x Firmware<=lw74.dn2.p272
Lexmark Ms71x
Lexmark M5163dn Firmware<=lw74.dn2.p272
Lexmark M5163dn
Lexmark Ms810 Firmware<=lw74.dn2.p272
Lexmark Ms810
Lexmark Ms811 Firmware<=lw74.dn2.p272
Lexmark Ms811
Lexmark Ms812 Firmware<=lw74.dn2.p272
Lexmark Ms812
Lexmark Ms817 Firmware<=lw74.dn2.p272
Lexmark Ms817
Lexmark Ms818 Firmware<=lw74.dn2.p272
Lexmark Ms818
Lexmark Ms810de Firmware<=lw74.dn4.p272
Lexmark Ms810de
Lexmark M5155 Firmware<=lw74.dn4.p272
Lexmark M5155
Lexmark M5163 Firmware<=lw74.dn4.p272
Lexmark M5163
Lexmark Ms812de Firmware<=lw74.dn7.p272
Lexmark Ms812de
Lexmark M5170 Firmware<=lw74.dn7.p272
Lexmark M5170
Lexmark Ms91x Firmware<=lw74.sa.p272
Lexmark Ms91x
Lexmark Mx31x Firmware<=lw74.sb2.p272
Lexmark Mx31x
Lexmark Xm1135 Firmware<=lw74.sb2.p272
Lexmark Xm1135
Lexmark Mx410 Firmware<=lw74.sb4.p272
Lexmark Mx410
Lexmark Mx510 Firmware<=lw74.sb4.p272
Lexmark Mx510
Lexmark Mx511 Firmware<=lw74.sb4.p272
Lexmark Mx511
Lexmark Xm1140 Firmware<=lw74.sb4.p272
Lexmark Xm1140
Lexmark Xm1145 Firmware<=lw74.sb4.p272
Lexmark Xm1145
Lexmark Mx610 Firmware<=lw74.sb7.p272
Lexmark Mx610
Lexmark Mx611 Firmware<=lw74.sb7.p272
Lexmark Mx611
Lexmark Xm3150 Firmware<=lw74.sb7.p272
Lexmark Xm3150
Lexmark Mx71x Firmware<=lw74.tu.p272
Lexmark Mx71x
Lexmark Mx81x Firmware<=lw74.tu.p272
Lexmark Mx81x
Lexmark Xm51xx Firmware<=lw74.tu.p272
Lexmark Xm51xx
Lexmark Xm71xx Firmware<=lw74.tu.p272
Lexmark Xm71xx
Lexmark Mx91x Firmware<=lw74.mg.p272
Lexmark Mx91x
Lexmark Xm91x Firmware<=lw74.mg.p272
Lexmark Xm91x
Lexmark Mx6500e Firmware<=lw74.jd.p272
Lexmark Mx6500e
Lexmark C746 Firmware<=lhs60.cm2.p737
Lexmark C746
Lexmark C748 Firmware<=lhs60.cm4.p737
Lexmark C748
Lexmark Cs748 Firmware<=lhs60.cm4.p737
Lexmark Cs748
Lexmark C792 Firmware<=lhs60.hc.p737
Lexmark C792
Lexmark Cs796 Firmware<=lhs60.hc.p737
Lexmark Cs796
Lexmark C925 Firmware<=lhs60.hv.p737
Lexmark C925
Lexmark C950 Firmware<=lhs60.tp.p737
Lexmark C950
Lexmark X548 Firmware<=lhs60.vk.p737
Lexmark X548
Lexmark Xs548 Firmware<=lhs60.vk.p737
Lexmark Xs548
Lexmark X74x Firmware<=lhs60.ny.p737
Lexmark X74x
Lexmark Xs748 Firmware<=lhs60.ny.p737
Lexmark Xs748
Lexmark X792 Firmware<=lhs60.mr.p737
Lexmark X792
Lexmark Xs79x Firmware<=lhs60.mr.p737
Lexmark Xs79x
Lexmark X925 Firmware<=lhs60.hk.p737
Lexmark X925
Lexmark Xs925 Firmware<=lhs60.hk.p737
Lexmark Xs925
Lexmark X95x Firmware<=lhs60.tq.p737
Lexmark X95x
Lexmark Xs95x Firmware<=lhs60.tq.p737
Lexmark Xs95x
Lexmark 6500e Firmware<=lhs60.jr.p737
Lexmark 6500e
Lexmark C734 Firmware<=lr.sk.p824
Lexmark C734
Lexmark C736 Firmware<=lr.ske.p824
Lexmark C736
Lexmark E46x Firmware<=lr.lbh.p824
Lexmark E46x
Lexmark T65x Firmware<=lr.jp.p824
Lexmark T65x
Lexmark X46x Firmware<=lr.bs.p824
Lexmark X46x
Lexmark X65x Firmware<=lr.mn.p824
Lexmark X65x
Lexmark X73x Firmware<=lr.fl.p824
Lexmark X73x
Lexmark W850 Firmware<=lp.jb.p823
Lexmark W850
Lexmark X86x Firmware<=lp.sp.p823
Lexmark X86x

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2020-10094?

    CVE-2020-10094 has a severity rating that indicates it can allow for cross-site scripting (XSS), potentially leading to unauthorized access or data exposure.

  • How do I fix CVE-2020-10094?

    To fix CVE-2020-10094, it is recommended to update the affected Lexmark firmware to versions LW74.VYL.P273 or higher.

  • Which Lexmark products are affected by CVE-2020-10094?

    CVE-2020-10094 affects several Lexmark printer models including CS31x, CS41x, CS51x, CX310, CX410, and multiple MS series printers.

  • What type of vulnerability is CVE-2020-10094?

    CVE-2020-10094 is classified as a cross-site scripting (XSS) vulnerability.

  • What can happen if CVE-2020-10094 is exploited?

    If exploited, CVE-2020-10094 could allow an attacker to execute scripts in the context of the user's session, potentially leading to data theft or session hijacking.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203