Read the docs
TI-2018-11072 Aliases CVE-2018-15519GHSA-6p7m-h6x7-qxgj

Various Lexmark devices have a Buffer Overflow (issue 1 of 2).

Priority MEDIUM 44CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Various Lexmark devices have a Buffer Overflow (issue 1 of 2).

Why it matters now

EPSS 0.01196 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 64

CPEVersionsRoleVendor
cpe:2.3:o:lexmark:cx310_firmware:*:*:*:*:*:*:*:*up to lw70.gm2.p204VulnerableLexmark
cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:cx410_firmware:*:*:*:*:*:*:*:*up to lw70.gm4.p204VulnerableLexmark
cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:cx510_firmware:*:*:*:*:*:*:*:*up to lw70.gm7.p204VulnerableLexmark
cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xc2132_firmware:*:*:*:*:*:*:*:*up to lw70.gm7.p204VulnerableLexmark
cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:mx31x_firmware:*:*:*:*:*:*:*:*up to lw70.sb2.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx31x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
  • cpe:2.3:o:lexmark:cx310_firmware:*:*:*:*:*:*:*:* Versions up to lw70.gm2.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:cx410_firmware:*:*:*:*:*:*:*:* Versions up to lw70.gm4.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:cx510_firmware:*:*:*:*:*:*:*:* Versions up to lw70.gm7.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xc2132_firmware:*:*:*:*:*:*:*:* Versions up to lw70.gm7.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:mx31x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.sb2.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx31x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
Show 54 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:lexmark:mx41x_firmware:*:*:*:*:*:*:*:*up to lw70.sb4.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx41x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:mx51x_firmware:*:*:*:*:*:*:*:*up to lw70.sb4.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx51x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xm1145_firmware:*:*:*:*:*:*:*:*up to lw70.sb4.p204VulnerableLexmark
cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:mx61x_firmware:*:*:*:*:*:*:*:*up to lw70.sb7.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx61x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xm3150_firmware:*:*:*:*:*:*:*:*up to lw70.sb7.p204VulnerableLexmark
cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:mx71x_firmware:*:*:*:*:*:*:*:*up to lw70.tu.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx71x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:mx81x_firmware:*:*:*:*:*:*:*:*up to lw70.tu.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx81x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xm51xx_firmware:*:*:*:*:*:*:*:*up to lw70.tu.p204VulnerableLexmark
cpe:2.3:h:lexmark:xm51xx:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xm71xx_firmware:*:*:*:*:*:*:*:*up to lw70.tu.p204VulnerableLexmark
cpe:2.3:h:lexmark:xm71xx:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:mx91x_firmware:*:*:*:*:*:*:*:*up to lw70.mg.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx91x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xm91x_firmware:*:*:*:*:*:*:*:*up to lw70.mg.p204VulnerableLexmark
cpe:2.3:h:lexmark:xm91x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:mx6500_firmware:*:*:*:*:*:*:*:*up to lw70.jd.p204VulnerableLexmark
cpe:2.3:h:lexmark:mx6500:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x54x_firmware:*:*:*:*:*:*:*:*up to lhs60.vk.p671VulnerableLexmark
cpe:2.3:h:lexmark:x54x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xs54x_firmware:*:*:*:*:*:*:*:*up to lhs60.vk.p671VulnerableLexmark
cpe:2.3:h:lexmark:xs54x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x74x_firmware:*:*:*:*:*:*:*:*up to lhs60.ny.p671VulnerableLexmark
cpe:2.3:h:lexmark:x74x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xs74x_firmware:*:*:*:*:*:*:*:*up to lhs60.ny.p671VulnerableLexmark
cpe:2.3:h:lexmark:xs74x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x79x_firmware:*:*:*:*:*:*:*:*up to lhs60.mr.p671VulnerableLexmark
cpe:2.3:h:lexmark:x79x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xs79x_firmware:*:*:*:*:*:*:*:*up to lhs60.mr.p671VulnerableLexmark
cpe:2.3:h:lexmark:xs79x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x92x_firmware:*:*:*:*:*:*:*:*up to lhs60.hk.p671VulnerableLexmark
cpe:2.3:h:lexmark:x92x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xs92x_firmware:*:*:*:*:*:*:*:*up to lhs60.hk.p671VulnerableLexmark
cpe:2.3:h:lexmark:xs92x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x95x_firmware:*:*:*:*:*:*:*:*up to lhs60.tq.p671VulnerableLexmark
cpe:2.3:h:lexmark:x95x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:xs95x_firmware:*:*:*:*:*:*:*:*up to lhs60.tq.p671VulnerableLexmark
cpe:2.3:h:lexmark:xs95x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:6500_firmware:*:*:*:*:*:*:*:*up to lhs60.jr.p671VulnerableLexmark
cpe:2.3:h:lexmark:6500:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x46x_firmware:*:*:*:*:*:*:*:*up to lr.bs.p803VulnerableLexmark
cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x65x_firmware:*:*:*:*:*:*:*:*up to lr.mn.p803VulnerableLexmark
cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x73x_firmware:*:*:*:*:*:*:*:*up to lr.fl.p803VulnerableLexmark
cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x86x_firmware:*:*:*:*:*:*:*:*up to lr.sp.p803VulnerableLexmark
cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
  • cpe:2.3:o:lexmark:mx41x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.sb4.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx41x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:mx51x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.sb4.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx51x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xm1145_firmware:*:*:*:*:*:*:*:* Versions up to lw70.sb4.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:mx61x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.sb7.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx61x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xm3150_firmware:*:*:*:*:*:*:*:* Versions up to lw70.sb7.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:mx71x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.tu.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx71x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:mx81x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.tu.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx81x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xm51xx_firmware:*:*:*:*:*:*:*:* Versions up to lw70.tu.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xm51xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xm71xx_firmware:*:*:*:*:*:*:*:* Versions up to lw70.tu.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xm71xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:mx91x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.mg.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx91x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xm91x_firmware:*:*:*:*:*:*:*:* Versions up to lw70.mg.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xm91x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:mx6500_firmware:*:*:*:*:*:*:*:* Versions up to lw70.jd.p204 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:mx6500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x54x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.vk.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x54x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xs54x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.vk.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xs54x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x74x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.ny.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x74x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xs74x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.ny.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xs74x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x79x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.mr.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x79x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xs79x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.mr.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xs79x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x92x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.hk.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x92x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xs92x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.hk.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xs92x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x95x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.tq.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x95x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:xs95x_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.tq.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:xs95x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:6500_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.jr.p671 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:6500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x46x_firmware:*:*:*:*:*:*:*:* Versions up to lr.bs.p803 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x65x_firmware:*:*:*:*:*:*:*:* Versions up to lr.mn.p803 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x73x_firmware:*:*:*:*:*:*:*:* Versions up to lr.fl.p803 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x86x_firmware:*:*:*:*:*:*:*:* Versions up to lr.sp.p803 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-15519
  2. 2026-10-03 Alias added: GHSA-6p7m-h6x7-qxgj

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences