Lucene search

[email protected]CVE-2019-10059

HistoryAug 28, 2019 - 10:15 p.m.

CVE-2019-10059

2019-08-2822:15:11

CWE-254

[email protected]

web.nvd.nist.gov

100

cve-2019-10059

legacy finger service

tcp port 79

lexmark devices

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

35.7%

JSON

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

Affected configurations

NVD

Node

lexmarkcs31x_firmwareRange≤lw71.vyl.p233

AND

lexmarkcs31xMatch-

Node

lexmarkcs41x_firmwareRange≤lw71.vy2.p233

AND

lexmarkcs41xMatch-

Node

lexmarkcx310_firmwareRange≤lw71.gm2.p233

AND

lexmarkcx310Match-

Node

lexmarkms310_firmwareRange≤lw71.prl.p233

AND

lexmarkms310Match-

Node

lexmarkms312_firmwareRange≤lw71.prl.p233

AND

lexmarkms312Match-

Node

lexmarkms317_firmwareRange≤lw71.prl.p233

AND

lexmarkms317Match-

Node

lexmarkms410_firmwareRange≤lw71.prl.p233

AND

lexmarkms410Match-

Node

lexmarkm1140_firmwareRange≤lw71.prl.p233

AND

lexmarkm1140Match-

Node

lexmarkms315_firmwareRange≤lw71.tl2.p233

AND

lexmarkms315Match-

Node

lexmarkms415_firmwareRange≤lw71.tl2.p233

AND

lexmarkms415Match-

Node

lexmarkms417_firmwareRange≤lw71.tl2.p233

AND

lexmarkms417Match-

Node

lexmarkms51x_firmwareRange≤lw71.pr2.p233

AND

lexmarkms51xMatch-

Node

lexmarkms610dn_firmwareRange≤lw71.pr2.p233

AND

lexmarkms610dnMatch-

Node

lexmarkms617_firmwareRange≤lw71.pr2.p233

AND

lexmarkms617Match-

Node

lexmarkm1145_firmwareRange≤lw71.pr2.p233

AND

lexmarkm1145Match-

Node

lexmarkm3150dn_firmwareRange≤lw71.pr2.p233

AND

lexmarkm3150dnMatch-

Node

lexmarkms71x_firmwareRange≤lw71.dn2.p233

AND

lexmarkms71xMatch-

Node

lexmarkm5163dn_firmwareRange≤lw71.dn2.p233

AND

lexmarkm5163dnMatch-

Node

lexmarkms810_firmwareRange≤lw71.dn2.p233

AND

lexmarkms810Match-

Node

lexmarkms811_firmwareRange≤lw71.dn2.p233

AND

lexmarkms811Match-

Node

lexmarkms812_firmwareRange≤lw71.dn2.p233

AND

lexmarkms812Match-

Node

lexmarkms817_firmwareRange≤lw71.dn2.p233

AND

lexmarkms817Match-

Node

lexmarkms818_firmwareRange≤lw71.dn2.p233

AND

lexmarkms818Match-

Node

lexmarkms810de_firmwareRange≤lw71.dn4.p233

AND

lexmarkms810deMatch-

Node

lexmarkm5155_firmwareRange≤lw71.dn4.p233

AND

lexmarkm5155Match-

Node

lexmarkm5163_firmwareRange≤lw71.dn4.p233

AND

lexmarkm5163Match-

Node

lexmarkms812de_firmwareRange≤lw71.dn7.p233

AND

lexmarkms812deMatch-

Node

lexmarkm5170_firmwareRange≤lw71.dn7.p233

AND

lexmarkm5170Match-

Node

lexmarkms91x_firmwareRange≤lw71.sa.p233

AND

lexmarkms91xMatch-

Node

lexmarkmx31x_firmwareRange≤lw71.sb2.p233

AND

lexmarkmx31xMatch-

Node

lexmarkxm1135_firmwareRange≤lw71.sb2.p233

AND

lexmarkxm1135Match-

Node

lexmarkmx410_firmwareRange≤lw71.sb4.p233

AND

lexmarkmx410Match-

Node

lexmarkmx510_firmwareRange≤lw71.sb4.p233

AND

lexmarkmx510Match-

Node

lexmarkmx511_firmwareRange≤lw71.sb4.p233

AND

lexmarkmx511Match-

Node

lexmarkmx610_firmwareRange≤lw71.sb7.p233

AND

lexmarkmx610Match-

Node

lexmarkmx611_firmwareRange≤lw71.sb7.p233

AND

lexmarkmx611Match-

Node

lexmarkxm3150_firmwareRange≤lw71.sb7.p233

AND

lexmarkxm3150Match-

Node

lexmarkmx71x_firmwareRange≤lw71.tu.p233

AND

lexmarkmx71xMatch-

Node

lexmarkmx81x_firmwareRange≤lw71.tu.p233

AND

lexmarkmx81xMatch-

Node

lexmarkxm51xx_firmwareRange≤lw71.tu.p233

AND

lexmarkxm51xxMatch-

Node

lexmarkxm71xx_firmwareRange≤lw71.tu.p233

AND

lexmarkxm71xxMatch-

Node

lexmarkmx91x_firmwareRange≤lw71.mg.p233

AND

lexmarkmx91xMatch-

Node

lexmarkxm91x_firmwareRange≤lw71.mg.p233

AND

lexmarkxm91xMatch-

Node

lexmarkmx6500e_firmwareRange≤lw71.jd.p233

AND

lexmarkmx6500eMatch-

Node

lexmarkc746Match-

AND

lexmarkc746_firmwareRange≤lhs60.cm2.p705

Node

lexmarkc748Match-

AND

lexmarkc748_firmwareRange≤lhs60.cm4.p705

Node

lexmarkcs748Match-

AND

lexmarkcs748_firmwareRange≤lhs60.cm4.p705

Node

lexmarkc792Match-

AND

lexmarkc792_firmwareRange≤lhs60.hc.p705

Node

lexmarkcs796Match-

AND

lexmarkcs796_firmwareRange≤lhs60.hc.p705

Node

lexmarkc925Match-

AND

lexmarkc925_firmwareRange≤lhs60.hv.p705

Node

lexmarkc950Match-

AND

lexmarkc950_firmwareRange≤lhs60.tp.p705

Node

lexmarkx548Match-

AND

lexmarkx548_firmwareRange≤lhs60.vk.p705

Node

lexmarkxs548_firmwareRange≤lhs60.vk.p705

AND

lexmarkxs548Match-

Node

lexmarkx74x_firmwareRange≤lhs60.ny.p705

AND

lexmarkx74xMatch-

Node

lexmarkxs748_firmwareRange≤lhs60.ny.p705

AND

lexmarkxs748Match-

Node

lexmarkx792_firmwareRange≤lhs60.mr.p705

AND

lexmarkx792Match-

Node

lexmarkxs79x_firmwareRange≤lhs60.mr.p705

AND

lexmarkxs79xMatch-

Node

lexmarkx925_firmwareRange≤lhs60.hk.p705

AND

lexmarkx925Match-

Node

lexmarkxs925_firmwareRange≤lhs60.hk.p705

AND

lexmarkxs925Match-

Node

lexmarkx95x_firmwareRange≤lhs60.tq.p705

AND

lexmarkx95xMatch-

Node

lexmarkxs95x_firmwareRange≤lhs60.tq.p705

AND

lexmarkxs95xMatch-

Node

lexmark6500e_firmwareRange≤lhs60.jr.p705

AND

lexmark6500eMatch-

Node

lexmarkc734_firmwareRange≤lr.sk.p815

AND

lexmarkc734Match-

Node

lexmarkc736_firmwareRange≤lr.ske.p815

AND

lexmarkc736Match-

Node

lexmarke46x_firmwareRange≤lr.lbh.p815

AND

lexmarke46xMatch-

Node

lexmarkt65x_firmwareRange≤lr.jp.p815

AND

lexmarkt65xMatch-

Node

lexmarkx46x_firmwareRange≤lr.bs.p815

AND

lexmarkx46xMatch-

Node

lexmarkx65x_firmwareRange≤lr.mn.p815

AND

lexmarkx65xMatch-

Node

lexmarkx73x_firmwareRange≤lr.fl.p815

AND

lexmarkx73xMatch-

Node

lexmarkw850_firmwareRange≤lp.jb.p815

AND

lexmarkw850Match-

Node

lexmarkx86x_firmwareRange≤lp.sp.p815

AND

lexmarkx86xMatch-

CPENameOperatorVersion
lexmark:cs31x_firmwarelexmark cs31x firmwarelelw71.vyl.p233

CPE	Name	Operator	Version
lexmark:cs31x_firmware	lexmark cs31x firmware	le	lw71.vyl.p233

References

support.lexmark.com/index?page=content&id=TE923&locale=EN&userlocale=EN_US

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

35.7%

JSON

Related for CVE-2019-10059

openvas1 prion1 cvelist1 nvd1 threatpost1