CVE-2011-3269

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-09 · updated 2026-06-16
Weakness: CWE-200

Description

Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.

Affected products

Lexmark 25Xxn Firmware: through lcl.cu.p106
Lexmark 6500E Firmware: through ljr.jr.p169
Lexmark C510 Firmware: through 891.004
Lexmark C520 Firmware: through ls.fa.p129s
Lexmark C522 Firmware: through ls.fa.p129s
Lexmark C524 Firmware: through ls.fa.p129s
Lexmark C530 Firmware: through ls.sw.p026avcs
Lexmark C532 Firmware: through ls.sw.p026avcs
Lexmark C534 Firmware: through ls.sw.p026avcs
Lexmark C540 Firmware: through ll.as.p429a
Lexmark C546 Firmware: through lu.as.p433
Lexmark C734 Firmware: through lr.sk.p510
Lexmark C736 Firmware: through lr.sk.p510
Lexmark C760 Firmware: through 971.001
Lexmark C762 Firmware: through 971.001
Lexmark C770 Firmware: through lc.cm.p027bs
Lexmark C772 Firmware: through lc.cm.p027bs
Lexmark C782 Firmware: through lc.io.p165as
Lexmark C789 Firmware: through lc.io.p165as
Lexmark C792E Firmware: through lhs1.hc.p131k
Lexmark C920 Firmware: through ls.ta.p127s
Lexmark C925De Firmware: through lhs1.hv.p129l
Lexmark C935Dn Firmware: through lc.jo.p051s
Lexmark C950 Firmware: through lhs1.tp.p145h
Lexmark E120 Firmware: through le.ul.p040
Lexmark E230 Firmware: through 141.609
Lexmark E232 Firmware: through 141.009
Lexmark E234 Firmware: through 141.c09
Lexmark E234N Firmware: through 141.c09
Lexmark E238 Firmware: through br.m.p204

References

Get alerted when CVE-2011-3269 or the next vulnerability affects your stack