CVEvulnerability
CVE-2011-3269
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-03-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.
Affected configurations
• lexmark x950 firmware (<= lhs1.tq.p145h)
• lexmark x952 firmware (<= lhs1.tq.p145h)
• lexmark x954 firmware (<= lhs1.tq.p145h)
• lexmark x940e firmware (<= lc.br.p051hds)
• lexmark x945e firmware (<= lc.br.p051hds)
• lexmark x925de firmware (<= lhs1.hk.p136l)
• lexmark x860 firmware (<= lp.sp.p510b)
• lexmark x862 firmware (<= lp.sp.p510b)
• lexmark x864 firmware (<= lp.sp.p510b)
• lexmark x850 firmware (<= lc4.be.p457s)
• lexmark x852 firmware (<= lc4.be.p457s)
• lexmark x854 firmware (<= lc4.be.p457s)
• lexmark x792de firmware (<= lhs1.mr.p135l)
• lexmark x782e firmware (<= lc2.to.p305cs)
• lexmark x772e firmware (<= lc.tr.p275s)
• lexmark x734 firmware (<= lr.fl.p510b)
• lexmark x736 firmware (<= lr.fl.p510b)
• lexmark x738 firmware (<= lr.fl.p510b)
• lexmark x650 firmware (<= lr.mn.p510b)
• lexmark x644 firmware (<= lc2.mc.p307as)
• lexmark x646 firmware (<= lc2.mc.p307as)
• lexmark x642 firmware (<= lc2.mb.p307cs)
• lexmark x548de firmware (<= lhs1.vk.p141i)
• lexmark x546 firmware (<= ll.el.p433)
• lexmark x543 firmware (<= ll.el.p433)
• lexmark x544 firmware (<= ll.el.p433)
• lexmark x46x firmware (<= lr.bs.p510b)
• lexmark x422 firmware (<= gn.aq.p202)
• lexmark x36x firmware (<= ll.bz.p433)
• lexmark x34x firmware (<= 401.ec4)
• lexmark x264 firmware (<= lm1.mt.p232)
• lexmark w850 firmware (<= lp.jb.p510)
• lexmark w840 firmware (<= ls.ha.p121s)
• lexmark t656 firmware (<= lsj.sj.p019s)
• lexmark t650 firmware (<= lr.jp.p510)
• lexmark t652 firmware (<= lr.jp.p510)
• lexmark t654 firmware (<= lr.jp.p510)
• lexmark t640 firmware (<= ls.st.p240s)
• lexmark t642 firmware (<= ls.st.p240s)
• lexmark t644 firmware (<= ls.st.p240s)
• lexmark t440 firmware (<= jx.ju.p101)
• lexmark e462 firmware (<= lr.lbh.p510)
• lexmark e460 firmware (<= lr.lbh.p510)
• lexmark e450 firmware (<= lm.sz.p113vcref)
• lexmark e350 firmware (<= le.ph.p121)
• lexmark e340 firmware (<= br.h.p204)
• lexmark e342 firmware (<= br.h.p204)
• lexmark e330 firmware (<= 141.c09)
• lexmark e332n firmware (<= 141.c09)
• lexmark e234 firmware (<= 141.c09)
• lexmark e234n firmware (<= 141.c09)
• lexmark e360 firmware (<= ll.lbm.p429f)
• lexmark e260 firmware (<= ll.lbl.p429f)
• lexmark e250 firmware (<= le.pm.p121)
• lexmark e240n firmware (<= br.q.p204)
• lexmark e240 firmware (<= br.m.p204)
• lexmark e238 firmware (<= br.m.p204)
• lexmark e232 firmware (<= 141.009)
• lexmark e230 firmware (<= 141.609)
• lexmark e120 firmware (<= le.ul.p040)
… and 24 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://contentdelivery.lexmark.com/webcontent/Email_shortcut_vulnerability.pdf Third Party Advisory
- http://contentdelivery.lexmark.com/webcontent/Email_shortcut_vulnerability.pdf Third Party Advisory