CVE-2010-0101: Lexmark 25xxn

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.

Affected products

• Lexmark 25xxn: any version
• Lexmark c510: any version
• Lexmark c52x: any version
• Lexmark c53x: any version
• Lexmark c540: any version
• Lexmark c543: any version
• Lexmark c544: any version
• Lexmark c546: any version
• Lexmark c73x: any version
• Lexmark c77x: any version
• Lexmark c78x: any version
• Lexmark c920: any version
• Lexmark c935dn: any version
• Lexmark e120: any version
• Lexmark e238: any version
• Lexmark e23x: any version
• Lexmark e240: any version
• Lexmark e240n: any version
• Lexmark e250: any version
• Lexmark e260: any version
• Lexmark e33x: any version
• Lexmark e34x: any version
• Lexmark e350: any version
• Lexmark e360d: any version
• Lexmark e360dn: any version
• and 36 more

Published 2010-05-04. Last modified 2026-06-16.