Lexmark Cs41X Firmware vulnerabilities

13 known vulnerabilities affecting lexmark/cs41x_firmware.

Total CVEs

13

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL4HIGH2MEDIUM7

Vulnerabilities

Page 1 of 1

CVE-2020-10094MEDIUMCVSS 5.4≤ lw74.vy2.p2722020-04-28

CVE-2020-10094 [MEDIUM] CWE-79 CVE-2020-10094: A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74. A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 before LW74.PRL.P273; MS315, MS415, MS417 before LW74.TL2

CVE-2020-10093MEDIUMCVSS 5.4≤ lw74.vy2.p2722020-04-28

CVE-2020-10093 [MEDIUM] CWE-79 CVE-2020-10093: A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued pr A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.

CVE-2018-18894HIGHCVSS 7.5fixed in lw71.vy2.p2162020-03-10

CVE-2018-18894 [HIGH] CWE-22 CVE-2018-18894: Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal v Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.

CVE-2019-19772MEDIUMCVSS 5.4≤ lw74.vy2.p2672020-03-06

CVE-2019-19772 [MEDIUM] CWE-79 CVE-2019-19772: Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexm Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.

CVE-2019-19773MEDIUMCVSS 5.4≤ lw74.vy2.p2672020-03-06

CVE-2019-19773 [MEDIUM] CWE-79 CVE-2019-19773: Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.

CVE-2019-9932CRITICALCVSS 9.8≤ lw71.vy2.p2302019-08-28

CVE-2019-9932 [CRITICAL] CWE-119 CVE-2019-9932: Various Lexmark products have a Buffer Overflow (issue 2 of 3). Various Lexmark products have a Buffer Overflow (issue 2 of 3).

CVE-2019-9930CRITICALCVSS 9.8≤ lw71.vy2.p2302019-08-28

CVE-2019-9930 [CRITICAL] CWE-190 CVE-2019-9930: Various Lexmark products have an Integer Overflow. Various Lexmark products have an Integer Overflow.

CVE-2019-9933CRITICALCVSS 9.8≤ lw71.vy2.p2302019-08-28

CVE-2019-9933 [CRITICAL] CWE-119 CVE-2019-9933: Various Lexmark products have a Buffer Overflow (issue 3 of 3). Various Lexmark products have a Buffer Overflow (issue 3 of 3).

CVE-2019-10058CRITICALCVSS 9.1≤ lw71.vy2.p2292019-08-28

CVE-2019-10058 [CRITICAL] CVE-2019-10058: Various Lexmark products have Incorrect Access Control. Various Lexmark products have Incorrect Access Control.

CVE-2019-9931HIGHCVSS 7.5≤ lw71.vy2.p2302019-08-28

CVE-2019-9931 [HIGH] CVE-2019-9931: Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be e Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.

CVE-2019-10059MEDIUMCVSS 5.3≤ lw71.vy2.p2332019-08-28

CVE-2019-10059 [MEDIUM] CWE-254 CVE-2019-10059: The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices. The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

CVE-2019-9934MEDIUMCVSS 5.3≤ lw71.vy2.p2292019-08-28

CVE-2019-9934 [MEDIUM] CWE-306 CVE-2019-9934: Various Lexmark products have Incorrect Access Control (issue 1 of 2). Various Lexmark products have Incorrect Access Control (issue 1 of 2).

CVE-2019-9935MEDIUMCVSS 5.3≤ lw71.vy2.p2292019-08-28

CVE-2019-9935 [MEDIUM] CWE-306 CVE-2019-9935: Various Lexmark products have Incorrect Access Control (issue 2 of 2). Various Lexmark products have Incorrect Access Control (issue 2 of 2).