← Vulnerability feed

Vulnerability record · CVE-2018-18894 · published 10 March 2020

CVE-2018-18894: Lexmark 6500e firmware path traversal vulnerability

Lexmark · 6500e Firmware

Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.

7.5 CVSS 3.1 High EPSS 1.7% · top 24.4% CWE-22 · Path traversal
7.5CVSS 3.1 base score, v2 5.0
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
49Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

49 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://support.lexmark.com/alerts Vendor Advisory
http://support.lexmark.com/index?page=content&id=TE906&locale=EN&userlocale=EN_US Vendor Advisory
http://support.lexmark.com/alerts Vendor Advisory
http://support.lexmark.com/index?page=content&id=TE906&locale=EN&userlocale=EN_US Vendor Advisory

Track CVE-2018-18894 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-9930Lexmark cs31x firmware integer overflow vulnerabilityVarious Lexmark products have an Integer Overflow.EPSS 1.5%9.8CVE-2019-9932Lexmark cs31x firmware memory buffer overflow vulnerabilityVarious Lexmark products have a Buffer Overflow (issue 2 of 3).EPSS 1.5%9.8CVE-2019-9933Lexmark cs31x firmware memory buffer overflow vulnerabilityVarious Lexmark products have a Buffer Overflow (issue 3 of 3).EPSS 1.5%9.1CVE-2019-10058Lexmark cs31x firmware vulnerabilityVarious Lexmark products have Incorrect Access Control.EPSS 1.1%7.5CVE-2011-3269Lexmark x950 firmware information exposure vulnerabilityLexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Sca…EPSS 1.1%7.5CVE-2019-9931Lexmark cs31x firmware vulnerabilityVarious Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.EPSS 1.1%5.4CVE-2020-10094Lexmark cs31x firmware cross-site scripting vulnerabilityA cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 befor…EPSS 0.65%5.4CVE-2020-10093Lexmark cs31x firmware cross-site scripting vulnerabilityA cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.EPSS 0.66%

Source: NIST National Vulnerability Database (record CVE-2018-18894), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.