CVE-2013-6032

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through…

published February 4, 2014

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

🚨 A remote attacker can easily remove the admin password on multiple Lexmark printer models! This makes it alarmingly simple to gain unauthorized access! 🔥 Think of it like a hotel where someone has found a way to bypass the front desk and unlock all the guest rooms without any identification. Once inside, they can snoop around, change settings, or even impersonate the staff! If exploited, an attacker could waltz right into the printer's admin interface, remove the password, and potentially wreak havoc by changing configurations or accessing sensitive documents. This vulnerability leaves the door wide open for unauthorized access to your printing infrastructure!

Put simply

Think of it like a hotel where someone has found a way to bypass the front desk and unlock all the guest rooms without any identification. Once inside, they can snoop around, change settings, or even impersonate the staff! This vulnerability allows remote attackers to remove the administrative password by manipulating the vac.255.GENPASSWORD parameter on specified Lexmark printers, affecting a wide range of models.

What to do

If exploited, an attacker could waltz right into the printer's admin interface, remove the password, and potentially wreak havoc by changing configurations or accessing sensitive documents. This vulnerability leaves the door wide open for unauthorized access to your printing infrastructure! To protect yourself, it's crucial to update your Lexmark printer firmware to the latest version. Ensure that any unused access points like the web interface are properly secured, and consider changing default settings immediately. 🛡️ You've got this! With a simple firmware update and some proactive measures, you'll be keeping those printers safe and sound! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03271 · 88.3th percentile
Published
2014-02-04T02:00Z
EPSS history
Timeline
  • 04 FEB 02:00Z
    cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through…
    cvelistv5