CVE-2018-15520

nvd nist

Published: Jun 28, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Various Lexmark devices have a Buffer Overflow (issue 2 of 2).

Affected (68)

Products: Lexmark: Cx82x Firmware, Cx860 Firmware, Xc6152 Firmware, Xc8155 Firmware, Xc8160 Firmware, Cx72x Firmware, Xc41x0 Firmware, Cx92x Firmware, Xc92x5 Firmware, Mx321 Firmware, Mb2338 Firmware, Mx42x Firmware, Mx52x Firmware, Mx622 Firmware, Mb2442 Firmware, Mb2546 Firmware, Mb2650 Firmware, Xm124x Firmware, Xm3250 Firmware, Mx72x Firmware, Mx82x Firmware, Mb2770 Firmware, Xm5370 Firmware, Xm7355 Firmware, Xm7370 Firmware, Cx421 Firmware, Mc2325 Firmware, Mc2425 Firmware, Cx522 Firmware, Cx62x Firmware, Mc2535 Firmware, Mc2640 Firmware, Xc2235 Firmware, Xc4240 Firmware

34 products

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx82x Firmware	Up to cxtpp.052.024
Lexmark Cx82x Firmware	From cxtpp.052.200 to cxtpp.052.204

Running on/with	Platform Versions
Lexmark Cx82x	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx860 Firmware	Up to cxtpp.052.024
Lexmark Cx860 Firmware	From cxtpp.052.200 to cxtpp.052.204

Running on/with	Platform Versions
Lexmark Cx860	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc6152 Firmware	Up to cxtpp.052.024
Lexmark Xc6152 Firmware	From cxtpp.052.200 to cxtpp.052.204

Running on/with	Platform Versions
Lexmark Xc6152	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc8155 Firmware	Up to cxtpp.052.024
Lexmark Xc8155 Firmware	From cxtpp.052.200 to cxtpp.052.204

Running on/with	Platform Versions
Lexmark Xc8155	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc8160 Firmware	Up to cxtpp.052.024
Lexmark Xc8160 Firmware	From cxtpp.052.200 to cxtpp.052.204

Running on/with	Platform Versions
Lexmark Xc8160	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx72x Firmware	Up to cxtat.052.024
Lexmark Cx72x Firmware	From cxtat.052.200 to cxtat.052.204

Running on/with	Platform Versions
Lexmark Cx72x	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc41x0 Firmware	Up to cxtat.052.024
Lexmark Xc41x0 Firmware	From cxtat.052.200 to cxtat.052.204

Running on/with	Platform Versions
Lexmark Xc41x0	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx92x Firmware	Up to cxtmh.052.024
Lexmark Cx92x Firmware	From cxtmh.052.200 to cxtmh.052.204

Running on/with	Platform Versions
Lexmark Cx92x	All versions

Configuration I

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc92x5 Firmware	Up to cxtmh.052.024
Lexmark Xc92x5 Firmware	From cxtmh.052.200 to cxtmh.052.204

Running on/with	Platform Versions
Lexmark Xc92x5	All versions

Configuration J

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx321 Firmware	Up to mxngm.052.024
Lexmark Mx321 Firmware	From mxngm.052.200 to mxngm.052.204

Running on/with	Platform Versions
Lexmark Mx321	All versions

Configuration K

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2338 Firmware	Up to mxngm.052.024
Lexmark Mb2338 Firmware	From mxngm.052.200 to mxngm.052.204

Running on/with	Platform Versions
Lexmark Mb2338	All versions

Configuration L

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx42x Firmware	Up to mxtgm.052.024
Lexmark Mx42x Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mx42x	All versions

Configuration M

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx52x Firmware	Up to mxtgm.052.024
Lexmark Mx52x Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mx52x	All versions

Configuration N

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx622 Firmware	Up to mxtgm.052.024
Lexmark Mx622 Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mx622	All versions

Configuration O

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2442 Firmware	Up to mxtgm.052.024
Lexmark Mb2442 Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mb2442	All versions

Configuration P

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2546 Firmware	Up to mxtgm.052.024
Lexmark Mb2546 Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mb2546	All versions

Configuration Q

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2650 Firmware	Up to mxtgm.052.024
Lexmark Mb2650 Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mb2650	All versions

Configuration R

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm124x Firmware	Up to mxtgm.052.024
Lexmark Xm124x Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Xm124x	All versions

Configuration S

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm3250 Firmware	Up to mxtgm.052.024
Lexmark Xm3250 Firmware	From mxtgm.052.200 to mxtgm.052.204

Running on/with	Platform Versions
Lexmark Xm3250	All versions

Configuration T

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx72x Firmware	Up to mxtgw.052.024
Lexmark Mx72x Firmware	From mxtgw.052.200 to mxtgw.052.204

Running on/with	Platform Versions
Lexmark Mx72x	All versions

Configuration U

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx82x Firmware	Up to mxtgw.052.024
Lexmark Mx82x Firmware	From mxtgw.052.200 to mxtgw.052.204

Running on/with	Platform Versions
Lexmark Mx82x	All versions

Configuration V

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2770 Firmware	Up to mxtgw.052.024
Lexmark Mb2770 Firmware	From mxtgw.052.200 to mxtgw.052.204

Running on/with	Platform Versions
Lexmark Mb2770	All versions

Configuration W

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm5370 Firmware	Up to mxtgw.052.024
Lexmark Xm5370 Firmware	From mxtgw.052.200 to mxtgw.052.204

Running on/with	Platform Versions
Lexmark Xm5370	All versions

Configuration X

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm7355 Firmware	Up to mxtgw.052.024
Lexmark Xm7355 Firmware	From mxtgw.052.200 to mxtgw.052.204

Running on/with	Platform Versions
Lexmark Xm7355	All versions

Configuration Y

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm7370 Firmware	Up to mxtgw.052.024
Lexmark Xm7370 Firmware	From mxtgw.052.200 to mxtgw.052.204

Running on/with	Platform Versions
Lexmark Xm7370	All versions

Configuration Z

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx421 Firmware	Up to cxnzj.052.024
Lexmark Cx421 Firmware	From cxnzj.052.200 to cxnzj.052.204

Running on/with	Platform Versions
Lexmark Cx421	All versions

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2325 Firmware	Up to cxnzj.052.024
Lexmark Mc2325 Firmware	From cxnzj.052.200 to cxnzj.052.204

Running on/with	Platform Versions
Lexmark Mc2325	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2425 Firmware	Up to cxnzj.052.024
Lexmark Mc2425 Firmware	From cxnzj.052.200 to cxnzj.052.204

Running on/with	Platform Versions
Lexmark Mc2425	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx522 Firmware	Up to cxtzj.052.024
Lexmark Cx522 Firmware	From cxtzj.052.200 to cxtzj.052.204

Running on/with	Platform Versions
Lexmark Cx522	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx62x Firmware	Up to cxtzj.052.024
Lexmark Cx62x Firmware	From cxtzj.052.200 to cxtzj.052.204

Running on/with	Platform Versions
Lexmark Cx62x	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2535 Firmware	Up to cxtzj.052.024
Lexmark Mc2535 Firmware	From cxtzj.052.200 to cxtzj.052.204

Running on/with	Platform Versions
Lexmark Mc2535	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2640 Firmware	Up to cxtzj.052.024
Lexmark Mc2640 Firmware	From cxtzj.052.200 to cxtzj.052.204

Running on/with	Platform Versions
Lexmark Mc2640	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc2235 Firmware	Up to cxtzj.052.024
Lexmark Xc2235 Firmware	From cxtzj.052.200 to cxtzj.052.204

Running on/with	Platform Versions
Lexmark Xc2235	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc4240 Firmware	Up to cxtzj.052.024
Lexmark Xc4240 Firmware	From cxtzj.052.200 to cxtzj.052.204

Running on/with	Platform Versions
Lexmark Xc4240	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://support.lexmark.com/index?page=content&id=TE892

Source: cve@mitre.org

Vendor Advisory

http://support.lexmark.com/index?page=content&id=TE892

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.