CVE-2020-10094 - CVE House
Back to Database
Status published Medium CVE-2020-10094

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273;...

Vulnerability Description

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 before LW74.PRL.P273; MS315, MS415, MS417 before LW74.TL2.P273; MS51x, MS610dn, MS617 before LW74.PR2.P273; M1145, M3150dn before LW74.PR2.P273; MS610de, M3150 before LW74.PR4.P273; MS71x,M5163dn before LW74.DN2.P273; MS810, MS811, MS812, MS817, MS818 before LW74.DN2.P273; MS810de, M5155, M5163 before LW74.DN4.P273; MS812de, M5170 before LW74.DN7.P273; MS91x before LW74.SA.P273; MX31x, XM1135 before LW74.SB2.P273; MX410, MX510 & MX511 before LW74.SB4.P273; XM1140, XM1145 before LW74.SB4.P273; MX610 & MX611 before LW74.SB7.P273; XM3150 before LW74.SB7.P273; MX71x, MX81x before LW74.TU.P273; XM51xx & XM71xx before LW74.TU.P273; MX91x & XM91x before LW74.MG.P273; MX6500e before LW74.JD.P273; C746 before LHS60.CM2.P738; C748, CS748 before LHS60.CM4.P738; C792, CS796 before LHS60.HC.P738; C925 before LHS60.HV.P738; C950 before LHS60.TP.P738; X548 & XS548 before LHS60.VK.P738; X74x & XS748 before LHS60.NY.P738; X792 & XS79x before LHS60.MR.P738; X925 & XS925 before LHS60.HK.P738; X95x & XS95x before LHS60.TQ.P738; 6500e before LHS60.JR.P738;C734 LR.SK.P824 and earlier; C736 LR.SKE.P824 and earlier; E46x LR.LBH.P824 and earlier; T65x LR.JP.P824 and earlier; X46x LR.BS.P824 and earlier; X65x LR.MN.P824 and earlier; X73x LR.FL.P824 and earlier; W850 LP.JB.P823 and earlier; and X86x LP.SP.P823 and earlier.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10094

Credits & Attribution

No credits recorded in the NVD database.

References

More from lexmark

View All →
CVE-2022-29850
Various Lexmark products through 2022-04-27 allow an attacker who has...
High 8.1
CVE-2022-24935
Lexmark products through 2022-02-10 have Incorrect Access Control....
High 7.5
CVE-2021-44738
Buffer overflow vulnerability has been identified in Lexmark devices through...
Critical 9.8
CVE-2021-44737
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that...
High 8.8
CVE-2021-44736
The initial admin account setup wizard on Lexmark devices allow...
Critical 9.8

Affected Vendor

Affected Software

cs31x firmware, cs41x firmware, cs51x firmware, cx310 firmware, cx410 firmware, xc2130 firmware, cx510 firmware, xc2132 firmware, ms310 firmware, ms312 firmware, ms317 firmware, ms410 firmware, m1140 firmware, ms315 firmware, ms415 firmware, ms417 firmware, ms51x firmware, ms610dn firmware, ms617 firmware, m1145 firmware, m3150dn firmware, ms610de firmware, m3150 firmware, ms71x firmware, m5163dn firmware, ms810 firmware, ms811 firmware, ms812 firmware, ms817 firmware, ms818 firmware, ms810de firmware, m5155 firmware, m5163 firmware, ms812de firmware, m5170 firmware, ms91x firmware, mx31x firmware, xm1135 firmware, mx410 firmware, mx510 firmware, mx511 firmware, xm1140 firmware, xm1145 firmware, mx610 firmware, mx611 firmware, xm3150 firmware, mx71x firmware, mx81x firmware, xm51xx firmware, xm71xx firmware, mx91x firmware, xm91x firmware, mx6500e firmware, c746 firmware, c748 firmware, cs748 firmware, c792 firmware, cs796 firmware, c925 firmware, c950 firmware, x548 firmware, xs548 firmware, x74x firmware, xs748 firmware, x792 firmware, xs79x firmware, x925 firmware, xs925 firmware, x95x firmware, xs95x firmware, 6500e firmware, c734 firmware, c736 firmware, e46x firmware, t65x firmware, x46x firmware, x65x firmware, x73x firmware, w850 firmware, x86x firmware
Vulnerable Versions:
0

Timeline

Official Publish: April 28th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.