CVE-2018-17944

Severity: medium (CVSS 4.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-12 · updated 2026-06-17
Weakness: CWE-200

Description

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.

Affected products

Lexmark Cx725H Firmware: all versions
Lexmark Cx820 Firmware: all versions
Lexmark Cx825 Firmware: all versions
Lexmark Cx860 Firmware: all versions
Lexmark Xc4150 Firmware: all versions
Lexmark Xc6152 Firmware: all versions
Lexmark Xc8155 Firmware: all versions
Lexmark Xc8160 Firmware: all versions

References

http://support.lexmark.com/index?page=content&id=TE909
http://support.lexmark.com/index?page=content&id=TE909

Get alerted when CVE-2018-17944 or the next vulnerability affects your stack