Is CVE-2013-6032 being actively exploited?

CVE-2013-6032 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2013-6032?

CVE-2013-6032 has a CVSS 2.0 base score of 10.0 (HIGH).

CVE-2013-6032

HIGH · CVSS 10.0EPSS 3.3%EU EUVD

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter.

Key facts

CVSS score: 10.0 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-20
EPSS score: 3.3% (88th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2013-5862)
Published: February 4, 2014
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-5862 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

lexmark / 25xxn
lexmark / c52x
lexmark / c53x
lexmark / c77x
lexmark / c78x
lexmark / c920
lexmark / c935dn
lexmark / e250
lexmark / e350
lexmark / e450
lexmark / n4000
lexmark / n4050e
lexmark / n70xxe
lexmark / t64x
lexmark / w840
lexmark / x642
lexmark / x644
lexmark / x646
lexmark / x64xef
lexmark / x772
lexmark / x78x
lexmark / x85x
lexmark / x94x

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Lexmark X642e (firmware revision LC2.MB.P237) and X644e (firmware revision LC2.MC.P239b) Multifunction Printers (MFPs) - Lexmark International, Inc. - Common Criteria CCEVS-VR-0059-2007 - archived

References

http://support.lexmark.com/index?page=content&id=TE586
http://www.kb.cert.org/vuls/id/108062(US Government Resource)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain