CVE-2019-10059

CWE-2543 documents3 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 53.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
71
Lexmark 6500e FirmwareLexmark C734 FirmwareLexmark C736 Firmware+68 more
Timeline
PublishedAug 28
Latest updateMay 24

Description

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages71 packages

▶NVDlexmark/c734_firmwarelr.sk.p815
▶NVDlexmark/c736_firmwarelr.ske.p815
▶NVDlexmark/c746_firmwarelhs60.cm2.p705
▶NVDlexmark/c748_firmwarelhs60.cm4.p705
▶NVDlexmark/c792_firmwarelhs60.hc.p705

🔴Vulnerability Details

2
GHSA
GHSA-5rrg-rq5w-673j: The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices↗2022-05-24
▶
CVEList
CVE-2019-10059: The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices↗2019-08-28
▶
CVE-2019-10059 (MEDIUM CVSS 5.3) | The legacy finger service (TCP port | cvebase.io