CVE-2013-6033 Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x throug...
LowCVSS 3.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lexmark c52x | <= ls.fa.p150 | No fix listed |
| lexmark c53x | <= ls.sw.p069 | No fix listed |
| lexmark c920 | <= ls.ta.p152 | No fix listed |
| lexmark c935dn | <= lc.jo.p091 | No fix listed |
| lexmark e250 | <= le.pm.p126 | No fix listed |
| lexmark e350 | <= le.ph.p129 | No fix listed |
| lexmark e450 | <= lm.sz.p124 | No fix listed |
| lexmark t64x | <= ls.st.p343 | No fix listed |
| lexmark w840 | <= ls.ha.p252 | No fix listed |
References
- support.lexmark.com vendor-advisory
- VU#108062 third-party-advisory us-government-resource
- 102752 vdb-entry
- 65277 vdb-entry