Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-18894 Details

Description

Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://support.lexmark.com/alerts	CVE	Vendor Advisory
http://support.lexmark.com/index?page=content&id=TE906&locale=EN&userlocale=EN_US	CVE	Vendor Advisory
http://support.lexmark.com/alerts	[email protected]	Vendor Advisory
http://support.lexmark.com/index?page=content&id=TE906&locale=EN&userlocale=EN_US	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	[email protected]

Affected Products

Product	Versions
lexmark 6500e firmware	< lhs60.jr.p683
CPE cpe:2.3:o:lexmark:6500e_firmware:::::::: Remediation No remediation found in references.
lexmark 6500e	All versions
CPE cpe:2.3:h:lexmark:6500e:-:::::::* Remediation No remediation found in references.
lexmark c748 firmware	< lhs60.cm4.p683
CPE cpe:2.3:o:lexmark:c748_firmware:::::::: Remediation No remediation found in references.
lexmark c748	All versions
CPE cpe:2.3:h:lexmark:c748:-:::::::* Remediation No remediation found in references.
lexmark c79x firmware	< lhs60.hc.p683
CPE cpe:2.3:o:lexmark:c79x_firmware:::::::: Remediation No remediation found in references.
lexmark c79x	All versions
CPE cpe:2.3:h:lexmark:c79x:-:::::::* Remediation No remediation found in references.
lexmark c925 firmware	< lhs60.hv.p683
CPE cpe:2.3:o:lexmark:c925_firmware:::::::: Remediation No remediation found in references.
lexmark c925	All versions
CPE cpe:2.3:h:lexmark:c925:-:::::::* Remediation No remediation found in references.
lexmark c95x firmware	< lhs60.tp.p683
CPE cpe:2.3:o:lexmark:c95x_firmware:::::::: Remediation No remediation found in references.
lexmark c95x	All versions
CPE cpe:2.3:h:lexmark:c95x:-:::::::* Remediation No remediation found in references.
lexmark cs41x firmware	< lw71.vy2.p216
CPE cpe:2.3:o:lexmark:cs41x_firmware:::::::: Remediation No remediation found in references.
lexmark cs41x	All versions
CPE cpe:2.3:h:lexmark:cs41x:-:::::::* Remediation No remediation found in references.
lexmark cs51x firmware	< lw71.vy4.p216
CPE cpe:2.3:o:lexmark:cs51x_firmware:::::::: Remediation No remediation found in references.
lexmark cs51x	All versions
CPE cpe:2.3:h:lexmark:cs51x:-:::::::* Remediation No remediation found in references.
lexmark cs748 firmware	<= lhs60.cm4.p683
CPE cpe:2.3:o:lexmark:cs748_firmware:::::::: Remediation No remediation found in references.
lexmark cs748	All versions
CPE cpe:2.3:h:lexmark:cs748:-:::::::* Remediation No remediation found in references.
lexmark cs796 firmware	< lhs60.hc.p683
CPE cpe:2.3:o:lexmark:cs796_firmware:::::::: Remediation No remediation found in references.
lexmark cs796	All versions
CPE cpe:2.3:h:lexmark:cs796:-:::::::* Remediation No remediation found in references.
lexmark cx410 firmware	< lw71.gm4.p216
CPE cpe:2.3:o:lexmark:cx410_firmware:::::::: Remediation No remediation found in references.
lexmark cx410	All versions
CPE cpe:2.3:h:lexmark:cx410:-:::::::* Remediation No remediation found in references.
lexmark cx510 firmware	< lw71.gm7.p216
CPE cpe:2.3:o:lexmark:cx510_firmware:::::::: Remediation No remediation found in references.
lexmark cx510	All versions
CPE cpe:2.3:h:lexmark:cx510:-:::::::* Remediation No remediation found in references.
lexmark m3150 firmware	< lw71.pr4.p216
CPE cpe:2.3:o:lexmark:m3150_firmware:::::::: Remediation No remediation found in references.
lexmark m3150	All versions
CPE cpe:2.3:h:lexmark:m3150:-:::::::* Remediation No remediation found in references.
lexmark m5155 firmware	< lw71.dn4.p216
CPE cpe:2.3:o:lexmark:m5155_firmware:::::::: Remediation No remediation found in references.
lexmark m5155	All versions
CPE cpe:2.3:h:lexmark:m5155:-:::::::* Remediation No remediation found in references.
lexmark m5163 firmware	< lw71.dn4.p216
CPE cpe:2.3:o:lexmark:m5163_firmware:::::::: Remediation No remediation found in references.
lexmark m5163	All versions
CPE cpe:2.3:h:lexmark:m5163:-:::::::* Remediation No remediation found in references.
lexmark m5170 firmware	< lw71.dn7.p216
CPE cpe:2.3:o:lexmark:m5170_firmware:::::::: Remediation No remediation found in references.
lexmark m5170	All versions
CPE cpe:2.3:h:lexmark:m5170:-:::::::* Remediation No remediation found in references.
lexmark ms610de firmware	< lw71.pr4.p216
CPE cpe:2.3:o:lexmark:ms610de_firmware:::::::: Remediation No remediation found in references.
lexmark ms610de	All versions
CPE cpe:2.3:h:lexmark:ms610de:-:::::::* Remediation No remediation found in references.
lexmark ms610dte firmware	< lw71.pr4.p216
CPE cpe:2.3:o:lexmark:ms610dte_firmware:::::::: Remediation No remediation found in references.
lexmark ms610dte	All versions
CPE cpe:2.3:h:lexmark:ms610dte:-:::::::* Remediation No remediation found in references.
lexmark ms810de firmware	< lw71.dn4.p216
CPE cpe:2.3:o:lexmark:ms810de_firmware:::::::: Remediation No remediation found in references.
lexmark ms810de	All versions
CPE cpe:2.3:h:lexmark:ms810de:-:::::::* Remediation No remediation found in references.
lexmark ms812de firmware	< lw71.dn7.p216
CPE cpe:2.3:o:lexmark:ms812de_firmware:::::::: Remediation No remediation found in references.
lexmark ms812de	All versions
CPE cpe:2.3:h:lexmark:ms812de:-:::::::* Remediation No remediation found in references.
lexmark ms91x firmware	< lw71.sa.p216
CPE cpe:2.3:o:lexmark:ms91x_firmware:::::::: Remediation No remediation found in references.
lexmark ms91x	All versions
CPE cpe:2.3:h:lexmark:ms91x:-:::::::* Remediation No remediation found in references.
lexmark mx410 firmware	< lw71.sb4.p216
CPE cpe:2.3:o:lexmark:mx410_firmware:::::::: Remediation No remediation found in references.
lexmark mx410	All versions
CPE cpe:2.3:h:lexmark:mx410:-:::::::* Remediation No remediation found in references.
lexmark mx510 firmware	< lw71.sb4.p216
CPE cpe:2.3:o:lexmark:mx510_firmware:::::::: Remediation No remediation found in references.
lexmark mx510	All versions
CPE cpe:2.3:h:lexmark:mx510:-:::::::* Remediation No remediation found in references.
lexmark mx511 firmware	< lw71.sb4.p216
CPE cpe:2.3:o:lexmark:mx511_firmware:::::::: Remediation No remediation found in references.
lexmark mx511	All versions
CPE cpe:2.3:h:lexmark:mx511:-:::::::* Remediation No remediation found in references.
lexmark mx610 firmware	< lw71.sb7.p216
CPE cpe:2.3:o:lexmark:mx610_firmware:::::::: Remediation No remediation found in references.
lexmark mx610	All versions
CPE cpe:2.3:h:lexmark:mx610:-:::::::* Remediation No remediation found in references.
lexmark mx611 firmware	< lw71.sb7.p216
CPE cpe:2.3:o:lexmark:mx611_firmware:::::::: Remediation No remediation found in references.
lexmark mx611	All versions
CPE cpe:2.3:h:lexmark:mx611:-:::::::* Remediation No remediation found in references.
lexmark mx6500e firmware	<= lw71.jd.p216
CPE cpe:2.3:o:lexmark:mx6500e_firmware:::::::: Remediation No remediation found in references.
lexmark mx6500e	All versions
CPE cpe:2.3:h:lexmark:mx6500e:-:::::::* Remediation No remediation found in references.
lexmark mx71x firmware	< lw71.tu.p216
CPE cpe:2.3:o:lexmark:mx71x_firmware:::::::: Remediation No remediation found in references.
lexmark mx71x	All versions
CPE cpe:2.3:h:lexmark:mx71x:-:::::::* Remediation No remediation found in references.
lexmark mx81x firmware	< lw71.tu.p216
CPE cpe:2.3:o:lexmark:mx81x_firmware:::::::: Remediation No remediation found in references.
lexmark mx81x	All versions
CPE cpe:2.3:h:lexmark:mx81x:-:::::::* Remediation No remediation found in references.
lexmark mx91x firmware	< lw71.mg.p216
CPE cpe:2.3:o:lexmark:mx91x_firmware:::::::: Remediation No remediation found in references.
lexmark mx91x	All versions
CPE cpe:2.3:h:lexmark:mx91x:-:::::::* Remediation No remediation found in references.
lexmark sm91x firmware	< lw71.mg.p216
CPE cpe:2.3:o:lexmark:sm91x_firmware:::::::: Remediation No remediation found in references.
lexmark sm91x	All versions
CPE cpe:2.3:h:lexmark:sm91x:-:::::::* Remediation No remediation found in references.
lexmark x46x firmware	< lr.bs.p810
CPE cpe:2.3:o:lexmark:x46x_firmware:::::::: Remediation No remediation found in references.
lexmark x46x	All versions
CPE cpe:2.3:h:lexmark:x46x:-:::::::* Remediation No remediation found in references.
lexmark x548 firmware	< lhs60.vk.p683
CPE cpe:2.3:o:lexmark:x548_firmware:::::::: Remediation No remediation found in references.
lexmark x548	All versions
CPE cpe:2.3:h:lexmark:x548:-:::::::* Remediation No remediation found in references.
lexmark x65x firmware	< lr.mn.p810
CPE cpe:2.3:o:lexmark:x65x_firmware:::::::: Remediation No remediation found in references.
lexmark x65x	All versions
CPE cpe:2.3:h:lexmark:x65x:-:::::::* Remediation No remediation found in references.
lexmark x73x firmware	< lr.fl.p810
CPE cpe:2.3:o:lexmark:x73x_firmware:::::::: Remediation No remediation found in references.
lexmark x73x	All versions
CPE cpe:2.3:h:lexmark:x73x:-:::::::* Remediation No remediation found in references.
lexmark x74x firmware	< lhs60.ny.p683
CPE cpe:2.3:o:lexmark:x74x_firmware:::::::: Remediation No remediation found in references.
lexmark x74x	All versions
CPE cpe:2.3:h:lexmark:x74x:-:::::::* Remediation No remediation found in references.
lexmark x792 firmware	< lhs60.mr.p683
CPE cpe:2.3:o:lexmark:x792_firmware:::::::: Remediation No remediation found in references.
lexmark x792	All versions
CPE cpe:2.3:h:lexmark:x792:-:::::::* Remediation No remediation found in references.
lexmark x86x firmware	< lr.sp.p810
CPE cpe:2.3:o:lexmark:x86x_firmware:::::::: Remediation No remediation found in references.
lexmark x86x	All versions
CPE cpe:2.3:h:lexmark:x86x:-:::::::* Remediation No remediation found in references.
lexmark x925 firmware	< lhs60.hk.p683
CPE cpe:2.3:o:lexmark:x925_firmware:::::::: Remediation No remediation found in references.
lexmark x925	All versions
CPE cpe:2.3:h:lexmark:x925:-:::::::* Remediation No remediation found in references.
lexmark x95x firmware	< lhs60.tq.p683
CPE cpe:2.3:o:lexmark:x95x_firmware:::::::: Remediation No remediation found in references.
lexmark x95x	All versions
CPE cpe:2.3:h:lexmark:x95x:-:::::::* Remediation No remediation found in references.
lexmark xc2132 firmware	< lw71.gm7.p216
CPE cpe:2.3:o:lexmark:xc2132_firmware:::::::: Remediation No remediation found in references.
lexmark xc2132	All versions
CPE cpe:2.3:h:lexmark:xc2132:-:::::::* Remediation No remediation found in references.
lexmark xm1145 firmware	< lw71.sb4.p216
CPE cpe:2.3:o:lexmark:xm1145_firmware:::::::: Remediation No remediation found in references.
lexmark xm1145	All versions
CPE cpe:2.3:h:lexmark:xm1145:-:::::::* Remediation No remediation found in references.
lexmark xm3150 firmware	< lw71.sb7.p216
CPE cpe:2.3:o:lexmark:xm3150_firmware:::::::: Remediation No remediation found in references.
lexmark xm3150	All versions
CPE cpe:2.3:h:lexmark:xm3150:-:::::::* Remediation No remediation found in references.
lexmark xm51xx firmware	< lw71.tu.p216
CPE cpe:2.3:o:lexmark:xm51xx_firmware:::::::: Remediation No remediation found in references.
lexmark xm51xx	All versions
CPE cpe:2.3:h:lexmark:xm51xx:-:::::::* Remediation No remediation found in references.
lexmark xm71xx firmware	< lw71.tu.p216
CPE cpe:2.3:o:lexmark:xm71xx_firmware:::::::: Remediation No remediation found in references.
lexmark xm71xx	All versions
CPE cpe:2.3:h:lexmark:xm71xx:-:::::::* Remediation No remediation found in references.
lexmark xs478 firmware	< lhs60.ny.p683
CPE cpe:2.3:o:lexmark:xs478_firmware:::::::: Remediation No remediation found in references.
lexmark xs478	All versions
CPE cpe:2.3:h:lexmark:xs478:-:::::::* Remediation No remediation found in references.
lexmark xs548 firmware	< lhs60.vk.p683
CPE cpe:2.3:o:lexmark:xs548_firmware:::::::: Remediation No remediation found in references.
lexmark xs548	All versions
CPE cpe:2.3:h:lexmark:xs548:-:::::::* Remediation No remediation found in references.
lexmark xs79x firmware	< lhs60.mr.p683
CPE cpe:2.3:o:lexmark:xs79x_firmware:::::::: Remediation No remediation found in references.
lexmark xs79x	All versions
CPE cpe:2.3:h:lexmark:xs79x:-:::::::* Remediation No remediation found in references.
lexmark xs925 firmware	< lhs60.hk.p683
CPE cpe:2.3:o:lexmark:xs925_firmware:::::::: Remediation No remediation found in references.
lexmark xs925	All versions
CPE cpe:2.3:h:lexmark:xs925:-:::::::* Remediation No remediation found in references.
lexmark xs95x firmware	< lhs60.tq.p683
CPE cpe:2.3:o:lexmark:xs95x_firmware:::::::: Remediation No remediation found in references.
lexmark xs95x	All versions
CPE cpe:2.3:h:lexmark:xs95x:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Mar 20, 2020	Initial Analysis	[email protected]

CVE-2018-18894 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation