CVE-2013-6032

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter.

cgi-bin/postpf/cgi-bin/dynamic/config/config.html en impresoras Lexmark X94x anterior a LC.BR.P142, X85x hasta LC4.BE.P487, X644 y X646 anterior a LC2.MC.P374, X642 hasta LC2.MB.P318, W840 hasta LS.HA.P252, T64x anterior a LS.ST.P344, X64xef hasta LC2.TI.P325, C935dn hasta LC.JO.P091, C920 hasta LS.TA.P152, C78x hasta LC.IO.P187, X78x hasta LC2.IO.P335, C77x hasta LC.CM.P052, X772 hasta LC2.TR.P291, C53x hasta LS.SW.P069, C52x hasta LS.FA.P150, 25xxN hasta LCL.CU.P114, N4000 hasta LC.MD.P119, N4050e hasta GO.GO.N206, N70xxe hasta LC.CO.N309, E450 hasta LM.SZ.P124, E350 hasta LE.PH.P129 y E250 hasta LE.PM.P126 permite a atacantes remotos eliminar la contraseña administrativa a través del parámetro vac.255.GENPASSWORD.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-10-04 CVE Reserved
2014-02-04 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (2)

URL	Tag	Source
http://support.lexmark.com/index?page=content&id=TE586	X_refsource_confirm
http://www.kb.cert.org/vuls/id/108062	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Lexmark Search vendor "Lexmark"		25xxn Search vendor "Lexmark" for product "25xxn"				<= lcl.cu.p114 Search vendor "Lexmark" for product "25xxn" and version " <= lcl.cu.p114"		-		Affected
Lexmark Search vendor "Lexmark"		C52x Search vendor "Lexmark" for product "C52x"				<= ls.fa.p150 Search vendor "Lexmark" for product "C52x" and version " <= ls.fa.p150"		-		Affected
Lexmark Search vendor "Lexmark"		C53x Search vendor "Lexmark" for product "C53x"				<= ls.sw.p069 Search vendor "Lexmark" for product "C53x" and version " <= ls.sw.p069"		-		Affected
Lexmark Search vendor "Lexmark"		C77x Search vendor "Lexmark" for product "C77x"				<= lc.cm.p052 Search vendor "Lexmark" for product "C77x" and version " <= lc.cm.p052"		-		Affected
Lexmark Search vendor "Lexmark"		C78x Search vendor "Lexmark" for product "C78x"				<= lc.io.p187 Search vendor "Lexmark" for product "C78x" and version " <= lc.io.p187"		-		Affected
Lexmark Search vendor "Lexmark"		C920 Search vendor "Lexmark" for product "C920"				<= ls.ta.p152 Search vendor "Lexmark" for product "C920" and version " <= ls.ta.p152"		-		Affected
Lexmark Search vendor "Lexmark"		C935dn Search vendor "Lexmark" for product "C935dn"				<= lc.jo.p091 Search vendor "Lexmark" for product "C935dn" and version " <= lc.jo.p091"		-		Affected
Lexmark Search vendor "Lexmark"		E250 Search vendor "Lexmark" for product "E250"				<= le.pm.p126 Search vendor "Lexmark" for product "E250" and version " <= le.pm.p126"		-		Affected
Lexmark Search vendor "Lexmark"		E350 Search vendor "Lexmark" for product "E350"				<= le.ph.p129 Search vendor "Lexmark" for product "E350" and version " <= le.ph.p129"		-		Affected
Lexmark Search vendor "Lexmark"		E450 Search vendor "Lexmark" for product "E450"				<= lm.sz.p124 Search vendor "Lexmark" for product "E450" and version " <= lm.sz.p124"		-		Affected
Lexmark Search vendor "Lexmark"		N4000 Search vendor "Lexmark" for product "N4000"				<= lc.md.p119 Search vendor "Lexmark" for product "N4000" and version " <= lc.md.p119"		-		Affected
Lexmark Search vendor "Lexmark"		N4050e Search vendor "Lexmark" for product "N4050e"				<= go.go.n206 Search vendor "Lexmark" for product "N4050e" and version " <= go.go.n206"		-		Affected
Lexmark Search vendor "Lexmark"		N70xxe Search vendor "Lexmark" for product "N70xxe"				<= lc.co.n309 Search vendor "Lexmark" for product "N70xxe" and version " <= lc.co.n309"		-		Affected
Lexmark Search vendor "Lexmark"		T64x Search vendor "Lexmark" for product "T64x"				<= ls.st.p343 Search vendor "Lexmark" for product "T64x" and version " <= ls.st.p343"		-		Affected
Lexmark Search vendor "Lexmark"		W840 Search vendor "Lexmark" for product "W840"				<= ls.ha.p252 Search vendor "Lexmark" for product "W840" and version " <= ls.ha.p252"		-		Affected
Lexmark Search vendor "Lexmark"		X642 Search vendor "Lexmark" for product "X642"				<= lc2.mb.p318 Search vendor "Lexmark" for product "X642" and version " <= lc2.mb.p318"		-		Affected
Lexmark Search vendor "Lexmark"		X644 Search vendor "Lexmark" for product "X644"				<= lc4.be.p487 Search vendor "Lexmark" for product "X644" and version " <= lc4.be.p487"		-		Affected
Lexmark Search vendor "Lexmark"		X646 Search vendor "Lexmark" for product "X646"				<= lc2.mc.p373 Search vendor "Lexmark" for product "X646" and version " <= lc2.mc.p373"		-		Affected
Lexmark Search vendor "Lexmark"		X64xef Search vendor "Lexmark" for product "X64xef"				<= lc2.ti.p325 Search vendor "Lexmark" for product "X64xef" and version " <= lc2.ti.p325"		-		Affected
Lexmark Search vendor "Lexmark"		X772 Search vendor "Lexmark" for product "X772"				<= lc2.tr.p291 Search vendor "Lexmark" for product "X772" and version " <= lc2.tr.p291"		-		Affected
Lexmark Search vendor "Lexmark"		X78x Search vendor "Lexmark" for product "X78x"				<= lc2.io.p335 Search vendor "Lexmark" for product "X78x" and version " <= lc2.io.p335"		-		Affected
Lexmark Search vendor "Lexmark"		X85x Search vendor "Lexmark" for product "X85x"				<= lc4.be.p487 Search vendor "Lexmark" for product "X85x" and version " <= lc4.be.p487"		-		Affected
Lexmark Search vendor "Lexmark"		X94x Search vendor "Lexmark" for product "X94x"				<= lc.br.p141 Search vendor "Lexmark" for product "X94x" and version " <= lc.br.p141"		-		Affected