CVE-2011-4538
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive...
CVE-2011-4538 is a medium vulnerability (CVSS 5.3) in Lexmark C540 Firmware, published March 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 59th percentile. No source names a fixed version.
- Severity
- 5.3 MediumCVSS 3.1, NVD
- Exploit chance
- 0.87%EPSS, 59th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
Affected products
- lexmark c540 firmware
- lexmark c543 firmware
- lexmark c544 firmware
- lexmark c546 firmware
- lexmark c734 firmware
- lexmark c736 firmware
- lexmark e260 firmware
- lexmark e360 firmware
- lexmark e460 firmware
- lexmark e462 firmware
- lexmark t650 firmware
- lexmark t652 firmware
Show 21 moreShow less
- lexmark t654 firmware
- lexmark w850 firmware
- lexmark x363 firmware
- lexmark x364 firmware
- lexmark x463 firmware
- lexmark x464 firmware
- lexmark x466 firmware
- lexmark x543 firmware
- lexmark x544 firmware
- lexmark x546 firmware
- lexmark x651 firmware
- lexmark x652 firmware
- lexmark x654 firmware
- lexmark x656 firmware
- lexmark x658 firmware
- lexmark x734 firmware
- lexmark x736 firmware
- lexmark x738 firmware
- lexmark x860 firmware
- lexmark x862 firmware
- lexmark x864 firmware
What each source reports
NVD Score used
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
- Record
CVE-2011-4538- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
- Record
CVE-2011-4538- Updated
- 2026-11-02
EUVDEUVD-2011-4464No score
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
- Record
EUVD-2011-4464- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v2r7-6rp8-j3j6No score
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive...
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
- Record
GHSA-v2r7-6rp8-j3j6- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.