Lexmark

Records84All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical33CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

Lexmark records in CISA KEV

No Lexmark vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cx310 Firmware 20 records MEDIUM M1140 Firmware 18 records MEDIUM M1145 Firmware 18 records MEDIUM M3150dn Firmware 18 records MEDIUM M5163dn Firmware 18 records MEDIUM Ms310 Firmware 18 records MEDIUM Ms312 Firmware 18 records MEDIUM Ms315 Firmware 18 records MEDIUM

Records

13 records in Cs31x Firmware · all components

TI-2019-07304 CVE-2019-9933 · GHSA-7cq9-564p-27wv

Various Lexmark products have a Buffer Overflow (issue 3 of 3).

MEDIUM 45

Various Lexmark products have a Buffer Overflow (issue 3 of 3).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01512 Published 2019-08-28 No fix listed CWE-119

TI-2019-07303 CVE-2019-9932 · GHSA-cjvp-jcgq-rjgr

Various Lexmark products have a Buffer Overflow (issue 2 of 3).

MEDIUM 45

Various Lexmark products have a Buffer Overflow (issue 2 of 3).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01512 Published 2019-08-28 No fix listed CWE-119

TI-2019-07301 CVE-2019-9930 · GHSA-c4c7-qfj6-vv5r

Various Lexmark products have an Integer Overflow.

MEDIUM 45

Various Lexmark products have an Integer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2019-08-28 No fix listed CWE-190

TI-2019-07384 CVE-2019-10058 · GHSA-p62c-8cpw-4f3j

Various Lexmark products have Incorrect Access Control.

MEDIUM 41

Various Lexmark products have Incorrect Access Control.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.01091 Published 2019-08-28 No fix listed

TI-2019-07302 CVE-2019-9931 · GHSA-w4h4-w25q-qhq3

Various Lexmark printers contain a denial of service vulnerability in the SNMP service…

LOW 35

Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01083 Published 2019-08-28 No fix listed

TI-2019-07383 CVE-2019-10057 · GHSA-wwfg-36p2-r558

Various Lexmark products have CSRF.

LOW 29

Various Lexmark products have CSRF.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00407 Published 2019-08-28 No fix listed CWE-352

TI-2019-07385 CVE-2019-10059 · GHSA-5rrg-rq5w-673j

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

LOW 26

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00871 Published 2019-08-28 No fix listed CWE-254

TI-2019-07306 CVE-2019-9935 · GHSA-f8vj-7p4x-8cxw

Various Lexmark products have Incorrect Access Control (issue 2 of 2).

LOW 26

Various Lexmark products have Incorrect Access Control (issue 2 of 2).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00825 Published 2019-08-28 No fix listed CWE-306

TI-2019-07305 CVE-2019-9934 · GHSA-fw3v-q2x5-3q3q

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

LOW 26

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00832 Published 2019-08-28 No fix listed CWE-306

TI-2020-08151 CVE-2020-10094 · GHSA-wr43-jjw8-6v2v

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x…

LOW 25

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 be…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2020-04-28 No fix listed CWE-79

TI-2020-08150 CVE-2020-10093 · GHSA-m6j4-75pv-6pwv

A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.

LOW 25

A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00658 Published 2020-04-28 No fix listed CWE-79

TI-2019-14249 CVE-2019-19773 · GHSA-3pvg-8h3w-fc9m

Various Lexmark products have stored XSS in the embedded web server used in older…

LOW 25

Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00658 Published 2020-03-06 No fix listed CWE-79

TI-2019-14248 CVE-2019-19772 · GHSA-pfrp-2qvp-2xjj

Various Lexmark products have reflected XSS in the embedded web server used in older…

LOW 25

Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2020-03-06 No fix listed CWE-79

Open these records in search →