Skip to content
Noroxi
CVE-2013-6032· NVD / CVE Program· CNA certcc

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter.

CriticalCVSS 10.0 · v2.0—No exploit No fix recorded

Noroxi analysis

No Noroxi analysis for this record yet

We don't hand-write analysis for the hundreds of thousands of vulnerabilities in the database; that wouldn't be honest. For notable, high-impact vulnerabilities our team writes the mechanism, detection and remediation steps.

We use this product, ask for help
Published
Feb 4, 2014
Updated
Jun 16, 2026
EPSS
3.3% · 88th percentile
Follow this CVE

Sign in to follow · You’ll be notified if a followed record enters KEV, gets an exploit or is updated.

Report tools

JSON

Action score

41

Plan

Add it to your regular patch cycle.

CVSS
40 / 40 · 10.0 / 10
CISA KEV
0 / 30 · Not listed
EPSS
1 / 30 · 3.3%

Affected systems

VendorProduct
lexmark25xxn
lexmarkc52x
lexmarkc53x
lexmarkc77x
lexmarkc78x
lexmarkc920
lexmarkc935dn
lexmarke250
lexmarke350
lexmarke450
lexmarkn4000
lexmarkn4050e

and 11 more

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

  • lexmark 25xxnup to lcl.cu.p114 inclusive
  • lexmark c52xup to ls.fa.p150 inclusive
  • lexmark c53xup to ls.sw.p069 inclusive
  • lexmark c77xup to lc.cm.p052 inclusive
  • lexmark c78xup to lc.io.p187 inclusive
  • lexmark c920up to ls.ta.p152 inclusive
  • lexmark c935dnup to lc.jo.p091 inclusive
  • lexmark e250up to le.pm.p126 inclusive
  • lexmark e350up to le.ph.p129 inclusive
  • lexmark e450up to lm.sz.p124 inclusive
  • lexmark n4000up to lc.md.p119 inclusive
  • lexmark n4050eup to go.go.n206 inclusive
  • lexmark n70xxeup to lc.co.n309 inclusive
  • lexmark t64xup to ls.st.p343 inclusive
  • lexmark w840up to ls.ha.p252 inclusive
  • lexmark x642up to lc2.mb.p318 inclusive
  • lexmark x644up to lc4.be.p487 inclusive
  • lexmark x646up to lc2.mc.p373 inclusive
  • lexmark x64xefup to lc2.ti.p325 inclusive
  • lexmark x772up to lc2.tr.p291 inclusive

Same product

lexmark: all records

Other highest-scoring records for the same primary product.

  • CVE-2010-0101The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn,
    31Monitor

Remediation

Which version to upgrade to

Fix versions compiled from the vendor, package registries and Microsoft. Verify the vendor's note before upgrading.

No fix version is recorded for this entry. Check the references for vendor advisories.

Exploit status

No known public exploit

No public exploit has been observed yet. That doesn't mean you're safe, only that the bar is a little higher.

Research context

For pentesters and researchers: attack profile, score disagreement, timeline, patch commits, credits, variant and chain candidates, bug bounty scope. All derived from existing data; no exploit code.

Timeline

From publication to today: proof of concept, Metasploit module, CISA KEV and fix record. Dates are as reported by the sources.

No dated events beyond publication.

EPSS, last 120 days

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Patch and commit links

Commit, PR and diff links among the references. A starting point for patch-diffing and variant hunting; fixes, not exploits.

No commit or PR link among the references.

Credits

All researchers

Finders, reporters and analysts named in the CNA record. Click a name for that researcher’s other records.

No credits in the CNA record.

Variant candidates

Same product, same weakness class, within 18 months. If the patch missed the root cause, the sibling bug is here.

No nightly-computed relations.

Chain candidates

An authentication bypass and a privilege-requiring bug in the same product, published close together: combined they may become an unauthenticated path.

—

Bug bounty scope

No known public program.

Source: bounty-targets-data (public HackerOne, Bugcrowd, Intigriti, YesWeHack listings).

Technical details

Attack conditions

  • No special conditions are required; it is repeatable.

If successful

Confidentiality
C · data can be read
Integrity
C · data or configuration can be modified
Availability
C · the service can be disrupted
Attack complexity
Low
Confidentiality impact
C
Integrity impact
C
Availability impact
C

Weakness class (CWE)

CWE-20 · Improper Input Validation

CVSS vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

nvd-primary

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

Change log

No changes recorded on tracked fields yet. Score, KEV, exploit maturity and fix status changes appear here.

References

Vendor advisories and official records. Exploit/PoC links are deliberately left out.

All records