CVE-2010-0101
The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.22% probability · 67th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- lexmark/25xxn · lexmark/c510 · lexmark/c52x · lexmark/c53x · lexmark/c540 · lexmark/c543 · lexmark/c544 · lexmark/c546 · lexmark/c73x · lexmark/c77x · lexmark/c78x · lexmark/c920 · lexmark/c935dn · lexmark/e120 · lexmark/e238 · lexmark/e23x · lexmark/e240 · lexmark/e240n · lexmark/e250 · lexmark/e260 · +40 more
- Source
- cret@cert.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.