CVE-2020-10094 · threatengine.sh

Home/CVE/A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x befo

CVE

CVE-2020-10094

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x befo

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273.

CS41x before LW74.VY2.P273.

CS51x before LW74.VY4.P273.

CX310 before LW74.GM2.P273.

CX410 & XC2130 before LW74.GM4.P273.

CX510 & XC2132 before LW74.GM7.P273.

MS310, MS312, MS317 before LW74.PRL.P273.

MS410, M1140 before LW74.PRL.P273.

MS315, MS415, MS417 before LW74.TL2.P273.

MS51x, MS610dn, MS617 before LW74.PR2.P273.

M1145, M3150dn before LW74.PR2.P273.

MS610de, M3150 before LW74.PR4.P273.

MS71x,M5163dn before LW74.DN2.P273.

MS810, MS811, MS812, MS817, MS818 before LW74.DN2.P273.

MS810de, M5155, M5163 before LW74.DN4.P273.

MS812de, M5170 before LW74.DN7.P273.

MS91x before LW74.SA.P273.

MX31x, XM1135 before LW74.SB2.P273.

MX410, MX510 & MX511 before LW74.SB4.P273.

XM1140, XM1145 before LW74.SB4.P273.

MX610 & MX611 before LW74.SB7.P273.

XM3150 before LW74.SB7.P273.

MX71x, MX81x before LW74.TU.P273.

XM51xx & XM71xx before LW74.TU.P273.

MX91x & XM91x before LW74.MG.P273.

MX6500e before LW74.JD.P273.

C746 before LHS60.CM2.P738.

C748, CS748 before LHS60.CM4.P738.

C792, CS796 before LHS60.HC.P738.

C925 before LHS60.HV.P738.

C950 before LHS60.TP.P738.

X548 & XS548 before LHS60.VK.P738.

X74x & XS748 before LHS60.NY.P738.

X792 & XS79x before LHS60.MR.P738.

X925 & XS925 before LHS60.HK.P738.

X95x & XS95x before LHS60.TQ.P738.

6500e before LHS60.JR.P738;C734 LR.SK.P824 and earlier.

C736 LR.SKE.P824 and earlier.

E46x LR.LBH.P824 and earlier.

T65x LR.JP.P824 and earlier.

X46x LR.BS.P824 and earlier.

X65x LR.MN.P824 and earlier.

X73x LR.FL.P824 and earlier.

W850 LP.JB.P823 and earlier.

and X86x LP.SP.P823 and earlier.

MEDIUM · CVSS 5.4 EPSS 0.00352

Monitor

No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

▤

Affected Products & Versions

60

lexmark cs31x firmware<= lw74.vyl.p272
lexmark cs41x firmware<= lw74.vy2.p272
lexmark cs51x firmware<= lw74.vy4.p272
lexmark cx310 firmware<= lw74.gm2.p272
lexmark cx410 firmware<= lw74.gm4.p272
lexmark xc2130 firmware<= lw74.gm4.p272
lexmark cx510 firmware<= lw74.gm7.p272
lexmark xc2132 firmware<= lw74.gm7.p272
Show all 60 affected productslexmark ms310 firmware<= lw74.prl.p272
lexmark ms312 firmware<= lw74.prl.p272
lexmark ms317 firmware<= lw74.prl.p272
lexmark ms410 firmware<= lw74.prl.p272
lexmark m1140 firmware<= lw74.prl.p272
lexmark ms315 firmware<= lw74.tl2.p272
lexmark ms415 firmware<= lw74.tl2.p272
lexmark ms417 firmware<= lw74.tl2.p272
lexmark ms51x firmware<= lw74.pr2.p272
lexmark ms610dn firmware<= lw74.pr2.p272
lexmark ms617 firmware<= lw74.pr2.p272
lexmark m1145 firmware<= lw74.pr2.p272
lexmark m3150dn firmware<= lw74.pr2.p272
lexmark ms610de firmware<= lw74.pr4.p272
lexmark m3150 firmware<= lw74.pr4.p272
lexmark ms71x firmware<= lw74.dn2.p272
lexmark m5163dn firmware<= lw74.dn2.p272
lexmark ms810 firmware<= lw74.dn2.p272
lexmark ms811 firmware<= lw74.dn2.p272
lexmark ms812 firmware<= lw74.dn2.p272
lexmark ms817 firmware<= lw74.dn2.p272
lexmark ms818 firmware<= lw74.dn2.p272
lexmark ms810de firmware<= lw74.dn4.p272
lexmark m5155 firmware<= lw74.dn4.p272
lexmark m5163 firmware<= lw74.dn4.p272
lexmark ms812de firmware<= lw74.dn7.p272
lexmark m5170 firmware<= lw74.dn7.p272
lexmark ms91x firmware<= lw74.sa.p272
lexmark mx31x firmware<= lw74.sb2.p272
lexmark xm1135 firmware<= lw74.sb2.p272
lexmark mx410 firmware<= lw74.sb4.p272
lexmark mx510 firmware<= lw74.sb4.p272
lexmark mx511 firmware<= lw74.sb4.p272
lexmark xm1140 firmware<= lw74.sb4.p272
lexmark xm1145 firmware<= lw74.sb4.p272
lexmark mx610 firmware<= lw74.sb7.p272
lexmark mx611 firmware<= lw74.sb7.p272
lexmark xm3150 firmware<= lw74.sb7.p272
lexmark mx71x firmware<= lw74.tu.p272
lexmark mx81x firmware<= lw74.tu.p272
lexmark xm51xx firmware<= lw74.tu.p272
lexmark xm71xx firmware<= lw74.tu.p272
lexmark mx91x firmware<= lw74.mg.p272
lexmark xm91x firmware<= lw74.mg.p272
lexmark mx6500e firmware<= lw74.jd.p272
lexmark c746 firmware<= lhs60.cm2.p737
lexmark c748 firmware<= lhs60.cm4.p737
lexmark cs748 firmware<= lhs60.cm4.p737
lexmark c792 firmware<= lhs60.hc.p737
lexmark cs796 firmware<= lhs60.hc.p737
lexmark c925 firmware<= lhs60.hv.p737
lexmark c950 firmware<= lhs60.tp.p737

▣

Scoring & Timeline

5.4

MEDIUM · CVSS v3.1 · cve@mitre.org

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD28 Apr 2020 · 02:15 PM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

🔗

References & Sources

1

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://support.lexmark.com/index?page=content&id=TE936Vendor Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin