Lucene search

[email protected]CVE-2016-6918

HistoryMar 09, 2020 - 5:15 p.m.

CVE-2016-6918

2020-03-0917:15:11

CWE-434

[email protected]

web.nvd.nist.gov

cve-2016-6918

lexmark

markvision enterprise

mve

remote attack

arbitrary commands

file upload vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.7%

JSON

Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (

Affected configurations

NVD

Node

lexmarkmarkvision_enterpriseRange<2.4.1

CPENameOperatorVersion
lexmark:markvision_enterpriselexmark markvision enterpriselt2.4.1

CPE	Name	Operator	Version
lexmark:markvision_enterprise	lexmark markvision enterprise	lt	2.4.1

References

support.lexmark.com/index?page=content&id=TE828&locale=EN&userlocale=EN_US

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.7%

JSON

Related for CVE-2016-6918

prion1 nvd1 cvelist1