Is CVE-2018-17944 being actively exploited?

CVE-2018-17944 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2018-17944?

CVE-2018-17944 has a CVSS 3.0 base score of 4.9 (MEDIUM).

CVE-2018-17944

MEDIUM · CVSS 4.9EPSS 0.9%EU EUVD

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.

Key facts

CVSS score: 4.9 (v3.0)
Severity: MEDIUM
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-200
EPSS score: 0.9% (58th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2018-9685)
Published: March 12, 2019
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2018-9685 in the EU Vulnerability Database. Last updated in EUVD on August 5, 2024.

View on the EU Vulnerability Database

Affected products

lexmark / cx725h
lexmark / cx725h firmware
lexmark / cx820
lexmark / cx820 firmware
lexmark / cx825
lexmark / cx825 firmware
lexmark / cx860
lexmark / cx860 firmware
lexmark / xc4150
lexmark / xc4150 firmware
lexmark / xc6152
lexmark / xc6152 firmware
lexmark / xc8155
lexmark / xc8155 firmware
lexmark / xc8160
lexmark / xc8160 firmware

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Lexmark MX432, MX522, MX622, MX721, MX722, MX822, MX826, MX931, CX622,CX625, CX730, CX735, CX820, CX825, CX860, CX930, CX931, CX942, CX943, and CX944 MFPs with TPM, Fax and Hard Drive with firmware version 081.234 - Lexmark International, Inc. - Common Criteria 586-EWA - active
Lexmark MX522, MX622h, MX721h, MX722h, MX822, MX826, CX622h, CX625h,CX725h, CX820, CX825, CX860, CX920, CX921, CX922, CX923, CX924, M C550SRF,M C550FG w/firmware 073.239 and Lexmark Secure Element (P/N 57X0185) - Lexmark International, Inc. - Common Criteria 521-EWA-2020 - archived

References

http://support.lexmark.com/index?page=content&id=TE909(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain