Every CVE Search/ Get API key

CVE-2011-4538

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive...

5.3 Medium

CVE-2011-4538 is a medium vulnerability (CVSS 5.3) in Lexmark C540 Firmware, published March 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 58th percentile. No source names a fixed version.

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

0.87%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.3

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Record
CVE-2011-4538
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Record
CVE-2011-4538
Updated
2026-11-02
EUVDEUVD-2011-4464 No score

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Record
EUVD-2011-4464
Updated
2026-11-03
GitHub AdvisoriesGHSA-v2r7-6rp8-j3j6 No score

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive...

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Record
GHSA-v2r7-6rp8-j3j6
Updated
2026-11-02

Affected products

Show 21 moreShow less

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

MoveEnter Open