Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut
Published Mar 9, 2020
7.5
HIGHCVSS 3.1
EPSS 1.10%
Description
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.
Affected products
No data.
Configuration 1
- ≤ lhs1.tq.p145h
Configuration 2
- ≤ lhs1.tq.p145h
Configuration 3
- ≤ lhs1.tq.p145h
Configuration 4
- ≤ lc.br.p051hds
Configuration 5
- ≤ lc.br.p051hds
Configuration 6
- ≤ lhs1.hk.p136l
Configuration 7
- ≤ lp.sp.p510b
Configuration 8
- ≤ lp.sp.p510b
Configuration 9
- ≤ lp.sp.p510b
Configuration 10
- ≤ lc4.be.p457s
Configuration 11
- ≤ lc4.be.p457s
Configuration 12
- ≤ lc4.be.p457s
Configuration 13
- ≤ lhs1.mr.p135l
Configuration 14
- ≤ lc2.to.p305cs
Configuration 15
- ≤ lc.tr.p275s
Configuration 16
- ≤ lr.fl.p510b
Configuration 17
- ≤ lr.fl.p510b
Configuration 18
- ≤ lr.fl.p510b
Configuration 19
- ≤ lr.mn.p510b
Configuration 20
- ≤ lc2.mc.p307as
Configuration 21
- ≤ lc2.mc.p307as
Configuration 22
- ≤ lc2.mb.p307cs
Configuration 23
- ≤ lhs1.vk.p141i
Configuration 24
- ≤ ll.el.p433
Configuration 25
- ≤ ll.el.p433
Configuration 26
- ≤ ll.el.p433
Configuration 27
- ≤ lr.bs.p510b
Configuration 28
- ≤ gn.aq.p202
Configuration 29
- ≤ ll.bz.p433
Configuration 30
- ≤ 401.ec4
Configuration 31
- ≤ lm1.mt.p232
Configuration 32
- ≤ lp.jb.p510
Configuration 33
- ≤ ls.ha.p121s
Configuration 34
- ≤ lsj.sj.p019s
Configuration 35
- ≤ lr.jp.p510
Configuration 36
- ≤ lr.jp.p510
Configuration 37
- ≤ lr.jp.p510
Configuration 38
- ≤ ls.st.p240s
Configuration 39
- ≤ ls.st.p240s
Configuration 40
- ≤ ls.st.p240s
Configuration 41
- ≤ jx.ju.p101
Configuration 42
- ≤ lr.lbh.p510
Configuration 43
- ≤ lr.lbh.p510
Configuration 44
- ≤ lm.sz.p113vcref
Configuration 45
- ≤ le.ph.p121
Configuration 46
- ≤ br.h.p204
Configuration 47
- ≤ br.h.p204
Configuration 48
- ≤ 141.c09
Configuration 49
- ≤ 141.c09
Configuration 50
- ≤ 141.c09
Configuration 51
- ≤ 141.c09
Configuration 52
- ≤ ll.lbm.p429f
Configuration 53
- ≤ ll.lbl.p429f
Configuration 54
- ≤ le.pm.p121
Configuration 55
- ≤ br.q.p204
Configuration 56
- ≤ br.m.p204
Configuration 57
- ≤ br.m.p204
Configuration 58
- ≤ 141.009
Configuration 59
- ≤ 141.609
Configuration 60
- ≤ le.ul.p040
Configuration 61
- ≤ lhs1.tp.p145h
Configuration 62
- ≤ lc.jo.p051s
Configuration 63
- ≤ lhs1.hv.p129l
Configuration 64
- ≤ ls.ta.p127s
Configuration 65
- ≤ lhs1.hc.p131k
Configuration 66
- ≤ lc.io.p165as
Configuration 67
- ≤ lc.io.p165as
Configuration 68
- ≤ lc.cm.p027bs
Configuration 69
- ≤ lc.cm.p027bs
Configuration 70
- ≤ 971.001
Configuration 71
- ≤ 971.001
Configuration 72
- ≤ lr.sk.p510
Configuration 73
- ≤ lr.sk.p510
Configuration 74
- ≤ lu.as.p433
Configuration 75
- ≤ ll.as.p429a
Configuration 76
- ≤ ls.sw.p026avcs
Configuration 77
- ≤ ls.sw.p026avcs
Configuration 78
- ≤ ls.sw.p026avcs
Configuration 79
- ≤ ls.fa.p129s
Configuration 80
- ≤ ls.fa.p129s
Configuration 81
- ≤ ls.fa.p129s
Configuration 82
- ≤ 891.004
Configuration 83
- ≤ ljr.jr.p169
Configuration 84
- ≤ lcl.cu.p106
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
No CVSS v3.0 score for this CVE.
AV:N/AC:L/Au:N/C:P/I:N/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (10 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 1.10% (0.01103) | 64.51th | v5 (v2026.06.15) |
| Jun 15, 2026 | 1.10% (0.01103) | 61.33th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.32% (0.00316) | 52.48th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.17% (0.00168) | 55.09th | v3 (v2023.03.01) |
| Jul 10, 2024 | 0.17% (0.00168) | 54.04th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.17% (0.00168) | 51.99th | v3 (v2023.03.01) |
| Mar 6, 2023 | 0.89% (0.00885) | 27.89th | v2 (v2022.01.01) |
| Sep 10, 2022 | 0.89% (0.00885) | 26.24th | v2 (v2022.01.01) |
| Apr 1, 2022 | 0.89% (0.00885) | 24.24th | v2 (v2022.01.01) |
| Feb 4, 2022 | 0.89% (0.00885) | 10.50th | v2 (v2022.01.01) |
References (1)
- http://contentdelivery.lexmark.com/webcontent/Email_shortcut_vulnerability.pdf x_refsource_MISCThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://contentdelivery.lexmark.com/webcontent/Email_shortcut_vulnerability.pdf | x_refsource_MISCThird Party Advisory |
Change history (0)
No recorded changes yet.