CVE-2013-6033
Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field.
Key facts
- CVSS score
- 3.5 (v2.0)
- Severity
- LOW
- CVSS vector
AV:N/AC:M/Au:S/C:N/I:P/A:N- Weakness (CWE)
- CWE-79
- EPSS score
- 1.7% (78th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2013-5863)
- Published
- February 4, 2014
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2013-5863 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- lexmark / c52x
- lexmark / c53x
- lexmark / c920
- lexmark / c935dn
- lexmark / e250
- lexmark / e350
- lexmark / e450
- lexmark / t64x
- lexmark / w840
References
- http://support.lexmark.com/index?page=content&id=TE585(Vendor Advisory)
- http://www.kb.cert.org/vuls/id/108062(US Government Resource)
- http://www.osvdb.org/102752
- http://www.securityfocus.com/bid/65277
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain