CVE-2018-15520

nvd nist

Published: Jun 28, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Various Lexmark devices have a Buffer Overflow (issue 2 of 2).

Affected (68)

Products: Lexmark: Cx82x Firmware, Cx860 Firmware, Xc6152 Firmware, Xc8155 Firmware, Xc8160 Firmware, Cx72x Firmware, Xc41x0 Firmware, Cx92x Firmware, Xc92x5 Firmware, Mx321 Firmware, Mb2338 Firmware, Mx42x Firmware, Mx52x Firmware, Mx622 Firmware, Mb2442 Firmware, Mb2546 Firmware, Mb2650 Firmware, Xm124x Firmware, Xm3250 Firmware, Mx72x Firmware, Mx82x Firmware, Mb2770 Firmware, Xm5370 Firmware, Xm7355 Firmware, Xm7370 Firmware, Cx421 Firmware, Mc2325 Firmware, Mc2425 Firmware, Cx522 Firmware, Cx62x Firmware, Mc2535 Firmware, Mc2640 Firmware, Xc2235 Firmware, Xc4240 Firmware

34 products

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx82x Firmware	version ≤ cxtpp.052.024
Lexmark Cx82x Firmware	cxtpp.052.200 ≤ version ≤ cxtpp.052.204

Running on/with	Platform Versions
Lexmark Cx82x	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx860 Firmware	version ≤ cxtpp.052.024
Lexmark Cx860 Firmware	cxtpp.052.200 ≤ version ≤ cxtpp.052.204

Running on/with	Platform Versions
Lexmark Cx860	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc6152 Firmware	version ≤ cxtpp.052.024
Lexmark Xc6152 Firmware	cxtpp.052.200 ≤ version ≤ cxtpp.052.204

Running on/with	Platform Versions
Lexmark Xc6152	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc8155 Firmware	version ≤ cxtpp.052.024
Lexmark Xc8155 Firmware	cxtpp.052.200 ≤ version ≤ cxtpp.052.204

Running on/with	Platform Versions
Lexmark Xc8155	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc8160 Firmware	version ≤ cxtpp.052.024
Lexmark Xc8160 Firmware	cxtpp.052.200 ≤ version ≤ cxtpp.052.204

Running on/with	Platform Versions
Lexmark Xc8160	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx72x Firmware	version ≤ cxtat.052.024
Lexmark Cx72x Firmware	cxtat.052.200 ≤ version ≤ cxtat.052.204

Running on/with	Platform Versions
Lexmark Cx72x	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc41x0 Firmware	version ≤ cxtat.052.024
Lexmark Xc41x0 Firmware	cxtat.052.200 ≤ version ≤ cxtat.052.204

Running on/with	Platform Versions
Lexmark Xc41x0	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx92x Firmware	version ≤ cxtmh.052.024
Lexmark Cx92x Firmware	cxtmh.052.200 ≤ version ≤ cxtmh.052.204

Running on/with	Platform Versions
Lexmark Cx92x	All versions

Configuration I

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc92x5 Firmware	version ≤ cxtmh.052.024
Lexmark Xc92x5 Firmware	cxtmh.052.200 ≤ version ≤ cxtmh.052.204

Running on/with	Platform Versions
Lexmark Xc92x5	All versions

Configuration J

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx321 Firmware	version ≤ mxngm.052.024
Lexmark Mx321 Firmware	mxngm.052.200 ≤ version ≤ mxngm.052.204

Running on/with	Platform Versions
Lexmark Mx321	All versions

Configuration K

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2338 Firmware	version ≤ mxngm.052.024
Lexmark Mb2338 Firmware	mxngm.052.200 ≤ version ≤ mxngm.052.204

Running on/with	Platform Versions
Lexmark Mb2338	All versions

Configuration L

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx42x Firmware	version ≤ mxtgm.052.024
Lexmark Mx42x Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mx42x	All versions

Configuration M

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx52x Firmware	version ≤ mxtgm.052.024
Lexmark Mx52x Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mx52x	All versions

Configuration N

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx622 Firmware	version ≤ mxtgm.052.024
Lexmark Mx622 Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mx622	All versions

Configuration O

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2442 Firmware	version ≤ mxtgm.052.024
Lexmark Mb2442 Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mb2442	All versions

Configuration P

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2546 Firmware	version ≤ mxtgm.052.024
Lexmark Mb2546 Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mb2546	All versions

Configuration Q

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2650 Firmware	version ≤ mxtgm.052.024
Lexmark Mb2650 Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Mb2650	All versions

Configuration R

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm124x Firmware	version ≤ mxtgm.052.024
Lexmark Xm124x Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Xm124x	All versions

Configuration S

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm3250 Firmware	version ≤ mxtgm.052.024
Lexmark Xm3250 Firmware	mxtgm.052.200 ≤ version ≤ mxtgm.052.204

Running on/with	Platform Versions
Lexmark Xm3250	All versions

Configuration T

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx72x Firmware	version ≤ mxtgw.052.024
Lexmark Mx72x Firmware	mxtgw.052.200 ≤ version ≤ mxtgw.052.204

Running on/with	Platform Versions
Lexmark Mx72x	All versions

Configuration U

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mx82x Firmware	version ≤ mxtgw.052.024
Lexmark Mx82x Firmware	mxtgw.052.200 ≤ version ≤ mxtgw.052.204

Running on/with	Platform Versions
Lexmark Mx82x	All versions

Configuration V

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mb2770 Firmware	version ≤ mxtgw.052.024
Lexmark Mb2770 Firmware	mxtgw.052.200 ≤ version ≤ mxtgw.052.204

Running on/with	Platform Versions
Lexmark Mb2770	All versions

Configuration W

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm5370 Firmware	version ≤ mxtgw.052.024
Lexmark Xm5370 Firmware	mxtgw.052.200 ≤ version ≤ mxtgw.052.204

Running on/with	Platform Versions
Lexmark Xm5370	All versions

Configuration X

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm7355 Firmware	version ≤ mxtgw.052.024
Lexmark Xm7355 Firmware	mxtgw.052.200 ≤ version ≤ mxtgw.052.204

Running on/with	Platform Versions
Lexmark Xm7355	All versions

Configuration Y

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xm7370 Firmware	version ≤ mxtgw.052.024
Lexmark Xm7370 Firmware	mxtgw.052.200 ≤ version ≤ mxtgw.052.204

Running on/with	Platform Versions
Lexmark Xm7370	All versions

Configuration Z

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx421 Firmware	version ≤ cxnzj.052.024
Lexmark Cx421 Firmware	cxnzj.052.200 ≤ version ≤ cxnzj.052.204

Running on/with	Platform Versions
Lexmark Cx421	All versions

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2325 Firmware	version ≤ cxnzj.052.024
Lexmark Mc2325 Firmware	cxnzj.052.200 ≤ version ≤ cxnzj.052.204

Running on/with	Platform Versions
Lexmark Mc2325	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2425 Firmware	version ≤ cxnzj.052.024
Lexmark Mc2425 Firmware	cxnzj.052.200 ≤ version ≤ cxnzj.052.204

Running on/with	Platform Versions
Lexmark Mc2425	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx522 Firmware	version ≤ cxtzj.052.024
Lexmark Cx522 Firmware	cxtzj.052.200 ≤ version ≤ cxtzj.052.204

Running on/with	Platform Versions
Lexmark Cx522	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Cx62x Firmware	version ≤ cxtzj.052.024
Lexmark Cx62x Firmware	cxtzj.052.200 ≤ version ≤ cxtzj.052.204

Running on/with	Platform Versions
Lexmark Cx62x	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2535 Firmware	version ≤ cxtzj.052.024
Lexmark Mc2535 Firmware	cxtzj.052.200 ≤ version ≤ cxtzj.052.204

Running on/with	Platform Versions
Lexmark Mc2535	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Mc2640 Firmware	version ≤ cxtzj.052.024
Lexmark Mc2640 Firmware	cxtzj.052.200 ≤ version ≤ cxtzj.052.204

Running on/with	Platform Versions
Lexmark Mc2640	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc2235 Firmware	version ≤ cxtzj.052.024
Lexmark Xc2235 Firmware	cxtzj.052.200 ≤ version ≤ cxtzj.052.204

Running on/with	Platform Versions
Lexmark Xc2235	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lexmark Xc4240 Firmware	version ≤ cxtzj.052.024
Lexmark Xc4240 Firmware	cxtzj.052.200 ≤ version ≤ cxtzj.052.204

Running on/with	Platform Versions
Lexmark Xc4240	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://support.lexmark.com/index?page=content&id=TE892

Source: cve@mitre.org

Vendor Advisory

http://support.lexmark.com/index?page=content&id=TE892

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.