CVE-2018-15519

published 2019-06-28

CVE-2018-15519: Various Lexmark devices have a Buffer Overflow (issue 1 of 2).

Priority P3 49 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

Various Lexmark devices have a Buffer Overflow (issue 1 of 2).

Affected

32 ranges · showing 25

Vendor	Product	Version range	Fixed in
lexmark	6500_firmware	<= lhs60.jr.p671	—
lexmark	cx310_firmware	<= lw70.gm2.p204	—
lexmark	cx410_firmware	<= lw70.gm4.p204	—
lexmark	cx510_firmware	<= lw70.gm7.p204	—
lexmark	mx31x_firmware	<= lw70.sb2.p204	—
lexmark	mx41x_firmware	<= lw70.sb4.p204	—
lexmark	mx51x_firmware	<= lw70.sb4.p204	—
lexmark	mx61x_firmware	<= lw70.sb7.p204	—
lexmark	mx6500_firmware	<= lw70.jd.p204	—
lexmark	mx71x_firmware	<= lw70.tu.p204	—
lexmark	mx81x_firmware	<= lw70.tu.p204	—
lexmark	mx91x_firmware	<= lw70.mg.p204	—
lexmark	x46x_firmware	<= lr.bs.p803	—
lexmark	x54x_firmware	<= lhs60.vk.p671	—
lexmark	x65x_firmware	<= lr.mn.p803	—
lexmark	x73x_firmware	<= lr.fl.p803	—
lexmark	x74x_firmware	<= lhs60.ny.p671	—
lexmark	x79x_firmware	<= lhs60.mr.p671	—
lexmark	x86x_firmware	<= lr.sp.p803	—
lexmark	x92x_firmware	<= lhs60.hk.p671	—
lexmark	x95x_firmware	<= lhs60.tq.p671	—
lexmark	xc2132_firmware	<= lw70.gm7.p204	—
lexmark	xm1145_firmware	<= lw70.sb4.p204	—
lexmark	xm3150_firmware	<= lw70.sb7.p204	—
lexmark	xm51xx_firmware	<= lw70.tu.p204	—

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119