Lucene search

[email protected]CVE-2019-6489

HistoryFeb 11, 2019 - 9:29 p.m.

CVE-2019-6489

2019-02-1121:29:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve

lexmark

6500e

remote attack

stored shortcuts

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.8 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

51.6%

JSON

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.

CPENameOperatorVersion
lexmark:xm5163_firmwarelexmark xm5163 firmwarelelw71.tu.p216
lexmark:xm5170_firmwarelexmark xm5170 firmwarelelw71.tu.p216
lexmark:xm7155_firmwarelexmark xm7155 firmwarelelw71.tu.p216
lexmark:xm7163_firmwarelexmark xm7163 firmwarelelw71.tu.p216
lexmark:xm7170_firmwarelexmark xm7170 firmwarelelw71.tu.p216
lexmark:xm7155x_firmwarelexmark xm7155x firmwarelelw71.tu.p216
lexmark:xm7163x_firmwarelexmark xm7163x firmwarelelw71.tu.p216
lexmark:xm7170x_firmwarelexmark xm7170x firmwarelelw71.tu.p216
lexmark:cx310_firmwarelexmark cx310 firmwarelelw71.gm2.p216
lexmark:cx410_firmwarelexmark cx410 firmwarelelw71.gm4.p216

CPE	Name	Operator	Version
lexmark:xm5163_firmware	lexmark xm5163 firmware	le	lw71.tu.p216
lexmark:xm5170_firmware	lexmark xm5170 firmware	le	lw71.tu.p216
lexmark:xm7155_firmware	lexmark xm7155 firmware	le	lw71.tu.p216
lexmark:xm7163_firmware	lexmark xm7163 firmware	le	lw71.tu.p216
lexmark:xm7170_firmware	lexmark xm7170 firmware	le	lw71.tu.p216
lexmark:xm7155x_firmware	lexmark xm7155x firmware	le	lw71.tu.p216
lexmark:xm7163x_firmware	lexmark xm7163x firmware	le	lw71.tu.p216
lexmark:xm7170x_firmware	lexmark xm7170x firmware	le	lw71.tu.p216
lexmark:cx310_firmware	lexmark cx310 firmware	le	lw71.gm2.p216
lexmark:cx410_firmware	lexmark cx410 firmware	le	lw71.gm4.p216

Rows per page:

1-10 of 401

References

support.lexmark.com/index?page=content&id=TE912

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.8 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

51.6%

JSON

Related for CVE-2019-6489

prion1 cvelist1 openvas1