5.3

CVE-2011-4538

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LexmarkX860 Firmware Version <= lp.sp.p108
   LexmarkX860 Version-
LexmarkX862 Firmware Version <= lp.sp.p108
   LexmarkX862 Version-
LexmarkX864 Firmware Version <= lp.sp.p108
   LexmarkX864 Version-
LexmarkX734 Firmware Version <= lr.fl.p224c
   LexmarkX734 Version-
LexmarkX736 Firmware Version <= lr.fl.p224c
   LexmarkX736 Version-
LexmarkX738 Firmware Version <= lr.fl.p224c
   LexmarkX738 Version-
LexmarkX651 Firmware Version <= lr.mn.p224a
   LexmarkX651 Version-
LexmarkX652 Firmware Version <= lr.mn.p224a
   LexmarkX652 Version-
LexmarkX654 Firmware Version <= lr.mn.p224a
   LexmarkX654 Version-
LexmarkX656 Firmware Version <= lr.mn.p224a
   LexmarkX656 Version-
LexmarkX658 Firmware Version <= lr.mn.p224a
   LexmarkX658 Version-
LexmarkX543 Firmware Version <= ll.el.p511
   LexmarkX543 Version-
LexmarkX544 Firmware Version <= ll.el.p511
   LexmarkX544 Version-
LexmarkX546 Firmware Version <= ll.el.p511
   LexmarkX546 Version-
LexmarkX463 Firmware Version <= lr.bs.p224a
   LexmarkX463 Version-
LexmarkX464 Firmware Version <= lr.bs.p224a
   LexmarkX464 Version-
LexmarkX466 Firmware Version <= lr.bs.p224a
   LexmarkX466 Version-
LexmarkX363 Firmware Version <= ll.bz.p511
   LexmarkX363 Version-
LexmarkX364 Firmware Version <= ll.bz.p511
   LexmarkX364 Version-
LexmarkW850 Firmware Version <= lp.jb.p108
   LexmarkW850 Version-
LexmarkT650 Firmware Version <= lr.jp.p224a
   LexmarkT650 Version-
LexmarkT652 Firmware Version <= lr.jp.p224a
   LexmarkT652 Version-
LexmarkT654 Firmware Version <= lr.jp.p224a
   LexmarkT654 Version-
LexmarkE460 Firmware Version <= lr.lbh.p224a
   LexmarkE460 Version-
LexmarkE462 Firmware Version <= lr.lbh.p224a
   LexmarkE462 Version-
LexmarkE360 Firmware Version <= ll.lbm.p511
   LexmarkE360 Version-
LexmarkE260 Firmware Version <= ll.lbl.p511
   LexmarkE260 Version-
LexmarkC734 Firmware Version <= lr.sk.p224a
   LexmarkC734 Version-
LexmarkC736 Firmware Version <= lr.sk.p224a
   LexmarkC736 Version-
LexmarkC546 Firmware Version <= lu.as.p511
   LexmarkC546 Version-
LexmarkC540 Firmware Version <= ll.as.p511
   LexmarkC540 Version-
LexmarkC543 Firmware Version <= ll.as.p511
   LexmarkC543 Version-
LexmarkC544 Firmware Version <= ll.as.p511
   LexmarkC544 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.431
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.