Lucene search

MitreCVE-2019-10057

HistoryAug 28, 2019 - 10:15 p.m.

CVE-2019-10057

2019-08-2822:15:11

CWE-352

mitre

web.nvd.nist.gov

lexmark

products

csrf

vulnerability

cve-2019-10057

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

21.6%

JSON

Various Lexmark products have CSRF.

Affected configurations

Nvd

Node

lexmarkcs31x_firmwareRange≤lw71.vyl.p228

AND

lexmarkcs31xMatch-

Node

lexmarkcs41x_firmwareRange≤lw71.vy2.p228

AND

lexmarkcs41xMatch-

Node

lexmarkcx310_firmwareRange≤lw71.gm2.p228

AND

lexmarkcx310Match-

Node

lexmarkms310_firmwareRange≤lw71.prl.p228

AND

lexmarkms310Match-

Node

lexmarkms312_firmwareRange≤lw71.prl.p228

AND

lexmarkms312Match-

Node

lexmarkms317_firmwareRange≤lw71.prl.p228

AND

lexmarkms317Match-

Node

lexmarkms410_firmwareRange≤lw71.prl.p228

AND

lexmarkms410Match-

Node

lexmarkm1140_firmwareRange≤lw71.prl.p228

AND

lexmarkm1140Match-

Node

lexmarkms315_firmwareRange≤lw71.tl2.p228

AND

lexmarkms315Match-

Node

lexmarkms415_firmwareRange≤lw71.tl2.p228

AND

lexmarkms415Match-

Node

lexmarkms417_firmwareRange≤lw71.tl2.p228

AND

lexmarkms417Match-

Node

lexmarkmx31x_firmwareRange≤lw71.sb2.p228

AND

lexmarkmx31xMatch-

Node

lexmarkxm1135_firmwareRange≤lw71.sb2.p228

AND

lexmarkxm1135Match-

Node

lexmarkms51x_firmwareRange≤lw71.pr2.p228

AND

lexmarkms51xMatch-

Node

lexmarkms610dn_firmwareRange≤lw71.pr2.p228

AND

lexmarkms610dnMatch-

Node

lexmarkms617_firmwareRange≤lw71.pr2.p228

AND

lexmarkms617Match-

Node

lexmarkm1145_firmwareRange≤lw71.pr2.p228

AND

lexmarkm1145Match-

Node

lexmarkm3150dn_firmwareRange≤lw71.pr2.p228

AND

lexmarkm3150dnMatch-

Node

lexmarkms71x_firmwareRange≤lw71.dn2.p228

AND

lexmarkms71xMatch-

Node

lexmarkm5163dn_firmwareRange≤lw71.dn2.p228

AND

lexmarkm5163dnMatch-

Node

lexmarkms810_firmwareRange≤lw71.dn2.p228

AND

lexmarkms810Match-

Node

lexmarkms811_firmwareRange≤lw71.dn2.p228

AND

lexmarkms811Match-

Node

lexmarkms812_firmwareRange≤lw71.dn2.p228

AND

lexmarkms812Match-

Node

lexmarkms817_firmwareRange≤lw71.dn2.p228

AND

lexmarkms817Match-

Node

lexmarkms818_firmwareRange≤lw71.dn2.p228

AND

lexmarkms818Match-

VendorProductVersionCPE
lexmarkcs31x_firmware*cpe:2.3:o:lexmark:cs31x_firmware:*:*:*:*:*:*:*:*
lexmarkcs31x-cpe:2.3:h:lexmark:cs31x:-:*:*:*:*:*:*:*
lexmarkcs41x_firmware*cpe:2.3:o:lexmark:cs41x_firmware:*:*:*:*:*:*:*:*
lexmarkcs41x-cpe:2.3:h:lexmark:cs41x:-:*:*:*:*:*:*:*
lexmarkcx310_firmware*cpe:2.3:o:lexmark:cx310_firmware:*:*:*:*:*:*:*:*
lexmarkcx310-cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*
lexmarkms310_firmware*cpe:2.3:o:lexmark:ms310_firmware:*:*:*:*:*:*:*:*
lexmarkms310-cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:*
lexmarkms312_firmware*cpe:2.3:o:lexmark:ms312_firmware:*:*:*:*:*:*:*:*
lexmarkms312-cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lexmark	cs31x_firmware	*	cpe:2.3:o:lexmark:cs31x_firmware::::::::
lexmark	cs31x	-	cpe:2.3:h:lexmark:cs31x:-:::::::*
lexmark	cs41x_firmware	*	cpe:2.3:o:lexmark:cs41x_firmware::::::::
lexmark	cs41x	-	cpe:2.3:h:lexmark:cs41x:-:::::::*
lexmark	cx310_firmware	*	cpe:2.3:o:lexmark:cx310_firmware::::::::
lexmark	cx310	-	cpe:2.3:h:lexmark:cx310:-:::::::*
lexmark	ms310_firmware	*	cpe:2.3:o:lexmark:ms310_firmware::::::::
lexmark	ms310	-	cpe:2.3:h:lexmark:ms310:-:::::::*
lexmark	ms312_firmware	*	cpe:2.3:o:lexmark:ms312_firmware::::::::
lexmark	ms312	-	cpe:2.3:h:lexmark:ms312:-:::::::*

Rows per page:

1-10 of 501

References

support.lexmark.com/index?page=content&id=TE921&locale=EN&userlocale=EN_US

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

21.6%

JSON

Related for CVE-2019-10057