CVE-2018-18894

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-10 · updated 2026-06-17
Weakness: CWE-22

Description

Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.

Affected products

Lexmark 6500E Firmware: before lhs60.jr.p683 — fixed in lhs60.jr.p683
Lexmark C748 Firmware: before lhs60.cm4.p683 — fixed in lhs60.cm4.p683
Lexmark C79X Firmware: before lhs60.hc.p683 — fixed in lhs60.hc.p683
Lexmark C925 Firmware: before lhs60.hv.p683 — fixed in lhs60.hv.p683
Lexmark C95X Firmware: before lhs60.tp.p683 — fixed in lhs60.tp.p683
Lexmark Cs41X Firmware: before lw71.vy2.p216 — fixed in lw71.vy2.p216
Lexmark Cs51X Firmware: before lw71.vy4.p216 — fixed in lw71.vy4.p216
Lexmark Cs748 Firmware: through lhs60.cm4.p683
Lexmark Cs796 Firmware: before lhs60.hc.p683 — fixed in lhs60.hc.p683
Lexmark Cx410 Firmware: before lw71.gm4.p216 — fixed in lw71.gm4.p216
Lexmark Cx510 Firmware: before lw71.gm7.p216 — fixed in lw71.gm7.p216
Lexmark M3150 Firmware: before lw71.pr4.p216 — fixed in lw71.pr4.p216
Lexmark M5155 Firmware: before lw71.dn4.p216 — fixed in lw71.dn4.p216
Lexmark M5163 Firmware: before lw71.dn4.p216 — fixed in lw71.dn4.p216
Lexmark M5170 Firmware: before lw71.dn7.p216 — fixed in lw71.dn7.p216
Lexmark Ms610De Firmware: before lw71.pr4.p216 — fixed in lw71.pr4.p216
Lexmark Ms610Dte Firmware: before lw71.pr4.p216 — fixed in lw71.pr4.p216
Lexmark Ms810De Firmware: before lw71.dn4.p216 — fixed in lw71.dn4.p216
Lexmark Ms812De Firmware: before lw71.dn7.p216 — fixed in lw71.dn7.p216
Lexmark Ms91X Firmware: before lw71.sa.p216 — fixed in lw71.sa.p216
Lexmark Mx410 Firmware: before lw71.sb4.p216 — fixed in lw71.sb4.p216
Lexmark Mx510 Firmware: before lw71.sb4.p216 — fixed in lw71.sb4.p216
Lexmark Mx511 Firmware: before lw71.sb4.p216 — fixed in lw71.sb4.p216
Lexmark Mx610 Firmware: before lw71.sb7.p216 — fixed in lw71.sb7.p216
Lexmark Mx611 Firmware: before lw71.sb7.p216 — fixed in lw71.sb7.p216
Lexmark Mx6500E Firmware: through lw71.jd.p216
Lexmark Mx71X Firmware: before lw71.tu.p216 — fixed in lw71.tu.p216
Lexmark Mx81X Firmware: before lw71.tu.p216 — fixed in lw71.tu.p216
Lexmark Mx91X Firmware: before lw71.mg.p216 — fixed in lw71.mg.p216
Lexmark Sm91X Firmware: before lw71.mg.p216 — fixed in lw71.mg.p216

How to fix

Upgrade to a fixed version: Lexmark 6500E Firmware lhs60.jr.p683; Lexmark C748 Firmware lhs60.cm4.p683; Lexmark C79X Firmware lhs60.hc.p683; Lexmark C925 Firmware lhs60.hv.p683; Lexmark C95X Firmware lhs60.tp.p683; Lexmark Cs41X Firmware lw71.vy2.p216; Lexmark Cs51X Firmware lw71.vy4.p216; Lexmark Cs796 Firmware lhs60.hc.p683; Lexmark Cx410 Firmware lw71.gm4.p216; Lexmark Cx510 Firmware lw71.gm7.p216; Lexmark M3150 Firmware lw71.pr4.p216; Lexmark M5155 Firmware lw71.dn4.p216. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-18894 or the next vulnerability affects your stack