CVE-2018-18894
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory...
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
- Record
CVE-2018-18894- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
- Record
CVE-2018-18894- Updated
- 2026-11-02
EUVDEUVD-2018-10604 No score
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
- Record
EUVD-2018-10604- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-26xq-4h5f-fhh8
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory...
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
- Record
GHSA-26xq-4h5f-fhh8- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
- lexmark 6500e firmware
- lexmark c748 firmware
- lexmark c79x firmware
- lexmark c925 firmware
- lexmark c95x firmware
- lexmark cs41x firmware
- lexmark cs51x firmware
- lexmark cs748 firmware
- lexmark cs796 firmware
- lexmark cx410 firmware
- lexmark cx510 firmware
- lexmark m3150 firmware
Show 37 moreShow less
- lexmark m5155 firmware
- lexmark m5163 firmware
- lexmark m5170 firmware
- lexmark ms610de firmware
- lexmark ms610dte firmware
- lexmark ms810de firmware
- lexmark ms812de firmware
- lexmark ms91x firmware
- lexmark mx410 firmware
- lexmark mx510 firmware
- lexmark mx511 firmware
- lexmark mx610 firmware
- lexmark mx611 firmware
- lexmark mx6500e firmware
- lexmark mx71x firmware
- lexmark mx81x firmware
- lexmark mx91x firmware
- lexmark sm91x firmware
- lexmark x46x firmware
- lexmark x548 firmware
- lexmark x65x firmware
- lexmark x73x firmware
- lexmark x74x firmware
- lexmark x792 firmware
- lexmark x86x firmware
- lexmark x925 firmware
- lexmark x95x firmware
- lexmark xc2132 firmware
- lexmark xm1145 firmware
- lexmark xm3150 firmware
- lexmark xm51xx firmware
- lexmark xm71xx firmware
- lexmark xs478 firmware
- lexmark xs548 firmware
- lexmark xs79x firmware
- lexmark xs925 firmware
- lexmark xs95x firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-18894 is a high vulnerability (CVSS 7.5) in Lexmark 6500e Firmware, published March 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.65%, the 76th percentile. No source names a fixed version.