Vulnerability CVE-2010-0101

Vulnerability CVE-2010-0101

Published: 2010-05-04 Modified: 2012-02-13

Description:

The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.

Type:

CWE-20

(Improper Input Validation)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.8/10	6.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
None	None	Complete

Affected software
Lexmark -> E23X
Lexmark -> N8120
Lexmark -> X543
Lexmark -> E240
Lexmark -> N8130
Lexmark -> X544
Lexmark -> 25xxn
Lexmark -> E240n
Lexmark -> T430
Lexmark -> X546
Lexmark -> C510
Lexmark -> E250
Lexmark -> T64X
Lexmark -> X642
Lexmark -> C52X
Lexmark -> E260
Lexmark -> T650
Lexmark -> X644
Lexmark -> C53X
Lexmark -> E33X
Lexmark -> T652
Lexmark -> X646
Lexmark -> C540
Lexmark -> E34X
Lexmark -> T654
Lexmark -> X64xef
Lexmark -> C543
Lexmark -> E350
Lexmark -> T656
Lexmark -> X65X
Lexmark -> C544
Lexmark -> E360d
Lexmark -> W840
Lexmark -> X73X
Lexmark -> C546
Lexmark -> E360dn
Lexmark -> W850
Lexmark -> X772e
Lexmark -> C73X
Lexmark -> E450
Lexmark -> X20X
Lexmark -> X782e
Lexmark -> C77X
Lexmark -> E460
Lexmark -> X26X
Lexmark -> X85X
Lexmark -> C78X
Lexmark -> E462
Lexmark -> X34X
Lexmark -> X86X
Lexmark -> C920
Lexmark -> N4000
Lexmark -> X36X
Lexmark -> X94X
Lexmark -> C935dn
Lexmark -> N4050e
Lexmark -> X422
Lexmark -> E120
Lexmark -> N70xxe
Lexmark -> X46X
Lexmark -> E238

References:

http://support.lexmark.com/index?page=content&id=TE87&locale=EN&userlocale=EN_US

Copyright 2024, cxsecurity.com