| Lexmark CX635adwe (CX635adwe)
|
|
Security Grade
Calculator v
|
Lexmark CX635adwe Colour Laser Multifunction Printer
Release Date: 2023-04-25 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
An attached security-slot lock obstructs controller-board and security-jumper access; the evaluated environment also requires controlled physical access. Rare is a qualitative resistance judgment. Evidence boundary: The lock is an explicit deployment condition documented by the administrator guide, not a claim that the retail box includes a fitted lock or that physical compromise is impossible. Additional primary evidence: source 2.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
This legacy firmware predates the CVE-2025-1127 fix; the specified administrator password is the vendor's stated mitigation. Evidence boundary: Advisory lists CX635 CXTGV.240.205 and previous, fixed .240.206 and later. Do not imply the CC certificate makes older firmware vulnerability-free.
|
| Prior attacks
|
None
|
🔗 Proof
|
The cited advisory reports no known malicious exploitation; this is a bounded finding, not proof of no historical attacks. Evidence boundary: No exact-model observed botnet/campaign identified in the limited reviewed primary sources; laboratory research is not scored as a prior real-world attack.
|
| Updatability
|
Very common
|
🔗 Proof
|
The vendor ST records multiple2024 firmware builds and verifies signed administrator updates. A later advisory supplies an actual corrected image. Score1 means documented continuing maintenance, not measured release frequency. Evidence boundary: Updating to a newer image is not claimed to preserve this exact222.037 evaluation. The selected historical binary remains separate from later patches. Additional primary evidence: source 2.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
In this evaluated deployment, IPsec authenticates remote IT peers; certificate validation or pre-shared keys establishes trusted endpoints. Evidence boundary: All network datagram exchanges must use IPsec in the evaluated configuration. A certificate-status lookup failure can be accepted under ST rules; avoid claiming perfect revocation availability.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Required IPsec protects relevant network exchanges with AES-256; this score depends on the explicitly configured evaluated deployment. Evidence boundary: Applies to specified IP networks. Analog fax/PSTN is outside the IP encryption boundary and must not be described as encrypted.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
The exact ST specifies mandatory AES-CBC-256 for sensitive configuration in its dedicated flash partition, with encryption keys held in TPM. Other flash partitions are unencrypted. Evidence boundary: Score1 addresses the stated sensitive stored configuration and document data. It does not claim encryption of executable/other flash partitions or physical immunity.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Administrators create, edit and delete local users and groups, assigning granular permissions to printer functions. Additional primary evidence: source 2.
|
| Authentication
|
Secure
|
🔗 Proof
|
Protected functions require authenticated users; signed updates and secure boot check firmware integrity in the specified deployment. Evidence boundary: Status viewing, job submission and enabled fax reception have explicit unauthenticated allowances. This score concerns protected administrative/user functions, not a claim that every operation requires login.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
The specified local-account policy locks an account after 3 failures within 5 minutes for5 minutes. The ST verifies configurable failure counting and timed lockout; this is an explicit deployment setting. Evidence boundary: The three numeric values are selected supported settings; they are not claimed as universal factory defaults for every printer. ST verifies the mechanism; later guidance gives configurable ranges. Additional primary evidence: source 2.
|
| Event logging
|
Access event logged
|
🔗 Proof
|
Notice-level auditing records successful and failed logins; local records are also forwarded to a remote syslog server over IPsec. Evidence boundary: Audit severity and remote server must be configured as required. Administrators may clear the log, which itself generates an audit record.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
The evaluated literature deployment creates individual installation-unique credentials with a configured15-character minimum. Score2 follows the Methodology's unique-credential intent; it does not assert automatic post-setup forced rotation. Evidence boundary: ST FIA_PMG_EXT.1 explicitly supports administrator-selected passwords and a15-or-greater minimum. Uniqueness/minimum15 are selected deployment conditions, not claimed retail defaults. No forced change-plus-complexity policy is fabricated.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
(Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Assessment scope
Documentation-based Common Criteria evaluated deployment: CX635adwe in Security Target v1.20 dated 10 September 2024, CXTGV.222.037, standard TPM and installed HDD P/N 27X0805. Use controlled physical access and an attached security lock, configured individual local Username/Password accounts with unique credentials and minimum length 15, protected functions, IPsec for all relevant remote-IT datagrams, Notice-level auditing and a remote syslog server. Configure login restriction threshold 3 failures within 5 minutes and 5-minute lockout. These are explicit literature conditions; no actual printer was configured or tested. Exact Security Target guarantees take precedence over later generic guidance.
Method and evidence boundaries
This is a documentary case-study assessment of the exact hardware, firmware and explicitly stated configuration, reviewed on 24 October 2026. No physical installation, penetration test or traffic capture by the author is claimed. Historical flaws do not establish current unpatched exposure. The website supplies qualitative categories rather than statistical thresholds: repeated real maintenance supports Updatability 1; isolated/uncertain maintenance supports2; a documented no-update condition supports3. Vulnerability/attack frequency labels are reasoned judgments, and a laboratory demonstration is not an observed campaign. None for prior attacks means no exact-model field campaign established in the reviewed sources, not proof of lifetime absence. Communications follows the least-protected enabled path carrying control, credentials or application payloads; a DNS/discovery packet alone is not used to label an entire device unencrypted. Storage evaluates confidential device-resident flash contents, not merely cloud security or whether executable firmware is readable. For Passwords, the methodology discusses first-setup credentials and expressly allows unique initial passwords. Where mandatory first-use creation or explicitly configured unique credentials do not match a shared-default-change label literally, option2 is a disclosed functional mapping, not a claim of forced periodic rotation. Option1 additionally requires enforced complexity; option3 requires positive evidence of common, predictable or unprotected access. Dates preserve the identified manufacturer announcement/availability or clearly identified primary regional catalog basis. No arbitrary first-of-month date is inserted. The calculated IDRS device grade is not a manufacturer certification or a student assignment mark.
Calculated IDRS: 2 + 1 + 2 = 5 (A-).
Date basis: Official Lexmark CX635adwe EPD, Product Description, Introduction Date 4/25/2023, North American market. This is an explicit original introduction-date field.
Date source: https://csr.lexmark.com/env-epd_28_2557794239.pdf
Product-specific boundaries: This grade applies to the exact evaluated hardware, firmware and explicitly configured enterprise deployment; it is not a stock-default rating. The exact2024 Security Target is authoritative. The March 2025 general administrator guide is later supporting guidance, not evidence that every later feature was present in 222.037. All remote-IT datagrams use IPsec in this deployment. Analog fax/PSTN lies outside that network encryption boundary. Older222.037 predates the2025 CVE fix; the specified administrator password supplies the vendor-stated untrusted-user mitigation. Password2 follows the declared unique-initial-credential interpretation, not a fabricated automatic rotation rule.
