What’s Vulnerable › Vulnerabilities

CVE-2013-6033

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-02-04 · updated 2026-06-16
• Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field.

Affected products

• Lexmark C52X: through ls.fa.p150
• Lexmark C53X: through ls.sw.p069
• Lexmark C920: through ls.ta.p152
• Lexmark C935Dn: through lc.jo.p091
• Lexmark E250: through le.pm.p126
• Lexmark E350: through le.ph.p129
• Lexmark E450: through lm.sz.p124
• Lexmark T64X: through ls.st.p343
• Lexmark W840: through ls.ha.p252

References

• http://support.lexmark.com/index?page=content&id=TE585
• http://www.kb.cert.org/vuls/id/108062
• http://www.osvdb.org/102752
• http://www.securityfocus.com/bid/65277
• http://support.lexmark.com/index?page=content&id=TE585
• http://www.kb.cert.org/vuls/id/108062
• http://www.osvdb.org/102752
• http://www.securityfocus.com/bid/65277

Get alerted when CVE-2013-6033 or the next vulnerability affects your stack