CVE-2018-15519

nvd nist

Published: Jun 28, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Various Lexmark devices have a Buffer Overflow (issue 1 of 2).

Affected (32)

Products: Lexmark: Cx310 Firmware, Cx410 Firmware, Cx510 Firmware, Xc2132 Firmware, Mx31x Firmware, Mx41x Firmware, Mx51x Firmware, Xm1145 Firmware, Mx61x Firmware, Xm3150 Firmware, Mx71x Firmware, Mx81x Firmware, Xm51xx Firmware, Xm71xx Firmware, Mx91x Firmware, Xm91x Firmware, Mx6500 Firmware, X54x Firmware, Xs54x Firmware, X74x Firmware, Xs74x Firmware, X79x Firmware, Xs79x Firmware, X92x Firmware, Xs92x Firmware, X95x Firmware, Xs95x Firmware, 6500 Firmware, X46x Firmware, X65x Firmware, X73x Firmware, X86x Firmware

32 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx310 Firmware	Up to lw70.gm2.p204

Running on/with	Platform Versions
Lexmark Cx310	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx410 Firmware	Up to lw70.gm4.p204

Running on/with	Platform Versions
Lexmark Cx410	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx510 Firmware	Up to lw70.gm7.p204

Running on/with	Platform Versions
Lexmark Cx510	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc2132 Firmware	Up to lw70.gm7.p204

Running on/with	Platform Versions
Lexmark Xc2132	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx31x Firmware	Up to lw70.sb2.p204

Running on/with	Platform Versions
Lexmark Mx31x	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx41x Firmware	Up to lw70.sb4.p204

Running on/with	Platform Versions
Lexmark Mx41x	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx51x Firmware	Up to lw70.sb4.p204

Running on/with	Platform Versions
Lexmark Mx51x	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm1145 Firmware	Up to lw70.sb4.p204

Running on/with	Platform Versions
Lexmark Xm1145	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx61x Firmware	Up to lw70.sb7.p204

Running on/with	Platform Versions
Lexmark Mx61x	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm3150 Firmware	Up to lw70.sb7.p204

Running on/with	Platform Versions
Lexmark Xm3150	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx71x Firmware	Up to lw70.tu.p204

Running on/with	Platform Versions
Lexmark Mx71x	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx81x Firmware	Up to lw70.tu.p204

Running on/with	Platform Versions
Lexmark Mx81x	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm51xx Firmware	Up to lw70.tu.p204

Running on/with	Platform Versions
Lexmark Xm51xx	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm71xx Firmware	Up to lw70.tu.p204

Running on/with	Platform Versions
Lexmark Xm71xx	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx91x Firmware	Up to lw70.mg.p204

Running on/with	Platform Versions
Lexmark Mx91x	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm91x Firmware	Up to lw70.mg.p204

Running on/with	Platform Versions
Lexmark Xm91x	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx6500 Firmware	Up to lw70.jd.p204

Running on/with	Platform Versions
Lexmark Mx6500	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X54x Firmware	Up to lhs60.vk.p671

Running on/with	Platform Versions
Lexmark X54x	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xs54x Firmware	Up to lhs60.vk.p671

Running on/with	Platform Versions
Lexmark Xs54x	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X74x Firmware	Up to lhs60.ny.p671

Running on/with	Platform Versions
Lexmark X74x	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xs74x Firmware	Up to lhs60.ny.p671

Running on/with	Platform Versions
Lexmark Xs74x	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X79x Firmware	Up to lhs60.mr.p671

Running on/with	Platform Versions
Lexmark X79x	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xs79x Firmware	Up to lhs60.mr.p671

Running on/with	Platform Versions
Lexmark Xs79x	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X92x Firmware	Up to lhs60.hk.p671

Running on/with	Platform Versions
Lexmark X92x	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xs92x Firmware	Up to lhs60.hk.p671

Running on/with	Platform Versions
Lexmark Xs92x	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X95x Firmware	Up to lhs60.tq.p671

Running on/with	Platform Versions
Lexmark X95x	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xs95x Firmware	Up to lhs60.tq.p671

Running on/with	Platform Versions
Lexmark Xs95x	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark 6500 Firmware	Up to lhs60.jr.p671

Running on/with	Platform Versions
Lexmark 6500	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X46x Firmware	Up to lr.bs.p803

Running on/with	Platform Versions
Lexmark X46x	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X65x Firmware	Up to lr.mn.p803

Running on/with	Platform Versions
Lexmark X65x	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X73x Firmware	Up to lr.fl.p803

Running on/with	Platform Versions
Lexmark X73x	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark X86x Firmware	Up to lr.sp.p803

Running on/with	Platform Versions
Lexmark X86x	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://support.lexmark.com/index?page=content&id=TE892

Source: cve@mitre.org

Vendor Advisory

http://support.lexmark.com/index?page=content&id=TE892

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.