Lexmark c920 vulnerabilities

3 CVEs affecting Lexmark c920, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-6033, published 2014-02-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6032, published 2014-02-04. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252,…
CVE-2013-6033, published 2014-02-04. Low severity, CVSS 3.5. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x…
CVE-2010-0101, published 2010-05-04. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause…