{"id":"CVE-2018-18894","aliases":["EUVD-2018-10604","GHSA-26xq-4h5f-fhh8"],"status":"published","title":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory...","description":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01655,"percentile":0.76747,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2020-03-10T12:50:09Z","modified":"2026-06-17T01:48:05Z","products":[{"vendor":"lexmark","product":"6500e_firmware"},{"vendor":"lexmark","product":"c748_firmware"},{"vendor":"lexmark","product":"c79x_firmware"},{"vendor":"lexmark","product":"c925_firmware"},{"vendor":"lexmark","product":"c95x_firmware"},{"vendor":"lexmark","product":"cs41x_firmware"},{"vendor":"lexmark","product":"cs51x_firmware"},{"vendor":"lexmark","product":"cs748_firmware"},{"vendor":"lexmark","product":"cs796_firmware"},{"vendor":"lexmark","product":"cx410_firmware"},{"vendor":"lexmark","product":"cx510_firmware"},{"vendor":"lexmark","product":"m3150_firmware"},{"vendor":"lexmark","product":"m5155_firmware"},{"vendor":"lexmark","product":"m5163_firmware"},{"vendor":"lexmark","product":"m5170_firmware"},{"vendor":"lexmark","product":"ms610de_firmware"},{"vendor":"lexmark","product":"ms610dte_firmware"},{"vendor":"lexmark","product":"ms810de_firmware"},{"vendor":"lexmark","product":"ms812de_firmware"},{"vendor":"lexmark","product":"ms91x_firmware"},{"vendor":"lexmark","product":"mx410_firmware"},{"vendor":"lexmark","product":"mx510_firmware"},{"vendor":"lexmark","product":"mx511_firmware"},{"vendor":"lexmark","product":"mx610_firmware"},{"vendor":"lexmark","product":"mx611_firmware"},{"vendor":"lexmark","product":"mx6500e_firmware"},{"vendor":"lexmark","product":"mx71x_firmware"},{"vendor":"lexmark","product":"mx81x_firmware"},{"vendor":"lexmark","product":"mx91x_firmware"},{"vendor":"lexmark","product":"sm91x_firmware"},{"vendor":"lexmark","product":"x46x_firmware"},{"vendor":"lexmark","product":"x548_firmware"},{"vendor":"lexmark","product":"x65x_firmware"},{"vendor":"lexmark","product":"x73x_firmware"},{"vendor":"lexmark","product":"x74x_firmware"},{"vendor":"lexmark","product":"x792_firmware"},{"vendor":"lexmark","product":"x86x_firmware"},{"vendor":"lexmark","product":"x925_firmware"},{"vendor":"lexmark","product":"x95x_firmware"},{"vendor":"lexmark","product":"xc2132_firmware"},{"vendor":"lexmark","product":"xm1145_firmware"},{"vendor":"lexmark","product":"xm3150_firmware"},{"vendor":"lexmark","product":"xm51xx_firmware"},{"vendor":"lexmark","product":"xm71xx_firmware"},{"vendor":"lexmark","product":"xs478_firmware"},{"vendor":"lexmark","product":"xs548_firmware"},{"vendor":"lexmark","product":"xs79x_firmware"},{"vendor":"lexmark","product":"xs925_firmware"},{"vendor":"lexmark","product":"xs95x_firmware"}],"references":[{"url":"http://support.lexmark.com/alerts","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://support.lexmark.com/index?page=content\u0026id=TE906\u0026locale=EN\u0026userlocale=EN_US","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18894"},{"url":"https://github.com/advisories/GHSA-26xq-4h5f-fhh8"}],"sources":{"cve":[{"id":"CVE-2018-18894","description":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.","status":"published","published":"2020-03-10T12:50:09Z","modified":"2024-08-05T11:23:08.534Z","updated_at":"2026-11-02T14:35:11.799349Z"}],"euvd":[{"id":"EUVD-2018-10604","description":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.","status":"published","published":"2020-03-10T12:50:09Z","modified":"2024-08-05T11:23:08Z","updated_at":"2026-11-03T02:39:34.768254Z"}],"ghsa":[{"id":"GHSA-26xq-4h5f-fhh8","title":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory...","description":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.","status":"published","published":"2022-05-24T17:10:31Z","modified":"2024-04-04T02:48:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:56:12.154453Z"}],"nvd":[{"id":"CVE-2018-18894","description":"Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.","status":"published","published":"2020-03-10T13:15:12.33Z","modified":"2026-06-17T01:48:05.833Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:05:00.03074Z"}]}}