CVE-2010-0101

Home/CVE/The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656,

CVE

The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656,

The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.

HIGH · CVSS 7.8 EPSS 0.00491

Schedule remediation

CVSS base score ≥ 7.0

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-20Improper Input Validation

▤

Affected Products & Versions

lexmark 25xxnall versions
lexmark c510all versions
lexmark c52xall versions
lexmark c53xall versions
lexmark c540all versions
lexmark c543all versions
lexmark c544all versions
lexmark c546all versions
Show all 60 affected productslexmark c73xall versions
lexmark c77xall versions
lexmark c78xall versions
lexmark c920all versions
lexmark c935dnall versions
lexmark e120all versions
lexmark e238all versions
lexmark e23xall versions
lexmark e240all versions
lexmark e240nall versions
lexmark e250all versions
lexmark e260all versions
lexmark e33xall versions
lexmark e34xall versions
lexmark e350all versions
lexmark e360dall versions
lexmark e360dnall versions
lexmark e450all versions
lexmark e460all versions
lexmark e462all versions
lexmark n4000all versions
lexmark n4050eall versions
lexmark n70xxeall versions
lexmark n8120all versions
lexmark n8130all versions
lexmark t430all versions
lexmark t64xall versions
lexmark t650all versions
lexmark t652all versions
lexmark t654all versions
lexmark t656all versions
lexmark w840all versions
lexmark w850all versions
lexmark x20xall versions
lexmark x26xall versions
lexmark x34xall versions
lexmark x36xall versions
lexmark x422all versions
lexmark x46xall versions
lexmark x543all versions
lexmark x544all versions
lexmark x546all versions
lexmark x642all versions
lexmark x644all versions
lexmark x646all versions
lexmark x64xefall versions
lexmark x65xall versions
lexmark x73xall versions
lexmark x772eall versions
lexmark x782eall versions
lexmark x85xall versions
lexmark x86xall versions

▣

Scoring & Timeline

7.8

HIGH · CVSS v2 (legacy) · cret@cert.org

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Published to NVD04 May 2010 · 04:00 PM

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://support.lexmark.com/index?page=content&id=TE87&locale=EN&userlocale=EN_USVendor Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin