CVE-2019-6489

published 2019-02-11

CVE-2019-6489: Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.

Priority P4 27 medium 5.3 CVSS 3.0

AV N AC L PR N UI N S U C N I L A N

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.

Affected

40 ranges · showing 25

Vendor	Product	Version range	Fixed in
lexmark	6500e_firmware	<= lhs60.jr.p809	—
lexmark	cx310_firmware	<= lw71.gm2.p216	—
lexmark	cx410_firmware	<= lw71.gm4.p216	—
lexmark	cx510_firmware	<= lw71.gm7.p216	—
lexmark	mx31x_firmware	<= lw71.sb2.p216	—
lexmark	mx410_firmware	<= lw71.sb4.p216	—
lexmark	mx510_firmware	<= lw71.sb4.p216	—
lexmark	mx511_firmware	<= lw71.sb4.p216	—
lexmark	mx610_firmware	<= lw71.sb7.p216	—
lexmark	mx611_firmware	<= lw71.sb7.p216	—
lexmark	mx6500e_firmware	<= lw71.jd.p216	—
lexmark	mx71x_firmware	<= lw71.tu.p216	—
lexmark	mx81x_firmware	<= lw71.tu.p216	—
lexmark	mx91x_firmware	<= lw71.mg.p216	—
lexmark	x46x_firmware	<= lr.bs.p809	—
lexmark	x548_firmware	<= lhs60.vk.p682	—
lexmark	x65x_firmware	<= lr.mn.p809	—
lexmark	x73x_firmware	<= lr.fl.p809	—
lexmark	x74x_firmware	<= lhs60.ny.p682	—
lexmark	x792_firmware	<= lhs60.mr.p682	—
lexmark	x86x_firmware	<= lp.sp.p809	—
lexmark	x925_firmware	<= lhs60.hk.p682	—
lexmark	x95x_firmware	<= lhs60.tq.p682	—
lexmark	xc2132_firmware	<= lw71.gm7.p216	—
lexmark	xm1145_firmware	<= lw71.sb4.p216	—

CVSS provenance

nvd v3.0 5.3 MEDIUM CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

nvd v2.0 6.4 MEDIUM AV:N/AC:L/Au:N/C:N/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.