Lexmark c540 Firmware vulnerabilities

2 CVEs affecting Lexmark c540 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4538, published 2020-03-09.

More from Lexmark.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-3269, published 2020-03-09. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.
• CVE-2011-4538, published 2020-03-09. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.