Lucene search

MitreCVE-2020-10094

HistoryApr 28, 2020 - 2:15 p.m.

CVE-2020-10094

2020-04-2814:15:14

CWE-79

mitre

web.nvd.nist.gov

lexmark

printers

vulnerability

xss

security

cve-2020-10094

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

22.7%

JSON

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 before LW74.PRL.P273; MS315, MS415, MS417 before LW74.TL2.P273; MS51x, MS610dn, MS617 before LW74.PR2.P273; M1145, M3150dn before LW74.PR2.P273; MS610de, M3150 before LW74.PR4.P273; MS71x,M5163dn before LW74.DN2.P273; MS810, MS811, MS812, MS817, MS818 before LW74.DN2.P273; MS810de, M5155, M5163 before LW74.DN4.P273; MS812de, M5170 before LW74.DN7.P273; MS91x before LW74.SA.P273; MX31x, XM1135 before LW74.SB2.P273; MX410, MX510 & MX511 before LW74.SB4.P273; XM1140, XM1145 before LW74.SB4.P273; MX610 & MX611 before LW74.SB7.P273; XM3150 before LW74.SB7.P273; MX71x, MX81x before LW74.TU.P273; XM51xx & XM71xx before LW74.TU.P273; MX91x & XM91x before LW74.MG.P273; MX6500e before LW74.JD.P273; C746 before LHS60.CM2.P738; C748, CS748 before LHS60.CM4.P738; C792, CS796 before LHS60.HC.P738; C925 before LHS60.HV.P738; C950 before LHS60.TP.P738; X548 & XS548 before LHS60.VK.P738; X74x & XS748 before LHS60.NY.P738; X792 & XS79x before LHS60.MR.P738; X925 & XS925 before LHS60.HK.P738; X95x & XS95x before LHS60.TQ.P738; 6500e before LHS60.JR.P738;C734 LR.SK.P824 and earlier; C736 LR.SKE.P824 and earlier; E46x LR.LBH.P824 and earlier; T65x LR.JP.P824 and earlier; X46x LR.BS.P824 and earlier; X65x LR.MN.P824 and earlier; X73x LR.FL.P824 and earlier; W850 LP.JB.P823 and earlier; and X86x LP.SP.P823 and earlier.

Affected configurations

Nvd

Node

lexmarkcs31x_firmwareRange≤lw74.vyl.p272

AND

lexmarkcs31xMatch-

Node

lexmarkcs41x_firmwareRange≤lw74.vy2.p272

AND

lexmarkcs41xMatch-

Node

lexmarkcs51x_firmwareRange≤lw74.vy4.p272

AND

lexmarkcs51xMatch-

Node

lexmarkcx310_firmwareRange≤lw74.gm2.p272

AND

lexmarkcx310Match-

Node

lexmarkcx410_firmwareRange≤lw74.gm4.p272

AND

lexmarkcx410Match-

Node

lexmarkxc2130_firmwareRange≤lw74.gm4.p272

AND

lexmarkxc2130Match-

Node

lexmarkcx510_firmwareRange≤lw74.gm7.p272

AND

lexmarkcx510Match-

Node

lexmarkxc2132_firmwareRange≤lw74.gm7.p272

AND

lexmarkxc2132Match-

Node

lexmarkms310_firmwareRange≤lw74.prl.p272

AND

lexmarkms310Match-

Node

lexmarkms312_firmwareRange≤lw74.prl.p272

AND

lexmarkms312Match-

Node

lexmarkms317_firmwareRange≤lw74.prl.p272

AND

lexmarkms317Match-

Node

lexmarkms410_firmwareRange≤lw74.prl.p272

AND

lexmarkms410Match-

Node

lexmarkm1140_firmwareRange≤lw74.prl.p272

AND

lexmarkm1140Match-

Node

lexmarkms315_firmwareRange≤lw74.tl2.p272

AND

lexmarkms315Match-

Node

lexmarkms415_firmwareRange≤lw74.tl2.p272

AND

lexmarkms415Match-

Node

lexmarkms417_firmwareRange≤lw74.tl2.p272

AND

lexmarkms417Match-

Node

lexmarkms51x_firmwareRange≤lw74.pr2.p272

AND

lexmarkms51xMatch-

Node

lexmarkms610dn_firmwareRange≤lw74.pr2.p272

AND

lexmarkms610dnMatch-

Node

lexmarkms617_firmwareRange≤lw74.pr2.p272

AND

lexmarkms617Match-

Node

lexmarkm1145_firmwareRange≤lw74.pr2.p272

AND

lexmarkm1145Match-

Node

lexmarkm3150dn_firmwareRange≤lw74.pr2.p272

AND

lexmarkm3150dnMatch-

Node

lexmarkms610de_firmwareRange≤lw74.pr4.p272

AND

lexmarkms610deMatch-

Node

lexmarkm3150_firmwareRange≤lw74.pr4.p272

AND

lexmarkm3150Match-

Node

lexmarkms71x_firmwareRange≤lw74.dn2.p272

AND

lexmarkms71xMatch-

Node

lexmarkm5163dn_firmwareRange≤lw74.dn2.p272

AND

lexmarkm5163dnMatch-

Node

lexmarkms810_firmwareRange≤lw74.dn2.p272

AND

lexmarkms810Match-

Node

lexmarkms811_firmwareRange≤lw74.dn2.p272

AND

lexmarkms811Match-

Node

lexmarkms812_firmwareRange≤lw74.dn2.p272

AND

lexmarkms812Match-

Node

lexmarkms817_firmwareRange≤lw74.dn2.p272

AND

lexmarkms817Match-

Node

lexmarkms818_firmwareRange≤lw74.dn2.p272

AND

lexmarkms818Match-

Node

lexmarkms810de_firmwareRange≤lw74.dn4.p272

AND

lexmarkms810deMatch-

Node

lexmarkm5155_firmwareRange≤lw74.dn4.p272

AND

lexmarkm5155Match-

Node

lexmarkm5163_firmwareRange≤lw74.dn4.p272

AND

lexmarkm5163Match-

Node

lexmarkms812de_firmwareRange≤lw74.dn7.p272

AND

lexmarkms812deMatch-

Node

lexmarkm5170_firmwareRange≤lw74.dn7.p272

AND

lexmarkm5170Match-

Node

lexmarkms91x_firmwareRange≤lw74.sa.p272

AND

lexmarkms91xMatch-

Node

lexmarkmx31x_firmwareRange≤lw74.sb2.p272

AND

lexmarkmx31xMatch-

Node

lexmarkxm1135_firmwareRange≤lw74.sb2.p272

AND

lexmarkxm1135Match-

Node

lexmarkmx410_firmwareRange≤lw74.sb4.p272

AND

lexmarkmx410Match-

Node

lexmarkmx510_firmwareRange≤lw74.sb4.p272

AND

lexmarkmx510Match-

Node

lexmarkmx511_firmwareRange≤lw74.sb4.p272

AND

lexmarkmx511Match-

Node

lexmarkxm1140_firmwareRange≤lw74.sb4.p272

AND

lexmarkxm1140Match-

Node

lexmarkxm1145_firmwareRange≤lw74.sb4.p272

AND

lexmarkxm1145Match-

Node

lexmarkmx610_firmwareRange≤lw74.sb7.p272

AND

lexmarkmx610Match-

Node

lexmarkmx611_firmwareRange≤lw74.sb7.p272

AND

lexmarkmx611Match-

Node

lexmarkxm3150_firmwareRange≤lw74.sb7.p272

AND

lexmarkxm3150Match-

Node

lexmarkmx71x_firmwareRange≤lw74.tu.p272

AND

lexmarkmx71xMatch-

Node

lexmarkmx81x_firmwareRange≤lw74.tu.p272

AND

lexmarkmx81xMatch-

Node

lexmarkxm51xx_firmwareRange≤lw74.tu.p272

AND

lexmarkxm51xxMatch-

Node

lexmarkxm71xx_firmwareRange≤lw74.tu.p272

AND

lexmarkxm71xxMatch-

Node

lexmarkmx91x_firmwareRange≤lw74.mg.p272

AND

lexmarkmx91xMatch-

Node

lexmarkxm91x_firmwareRange≤lw74.mg.p272

AND

lexmarkxm91xMatch-

Node

lexmarkmx6500e_firmwareRange≤lw74.jd.p272

AND

lexmarkmx6500eMatch-

Node

lexmarkc746_firmwareRange≤lhs60.cm2.p737

AND

lexmarkc746Match-

Node

lexmarkc748_firmwareRange≤lhs60.cm4.p737

AND

lexmarkc748Match-

Node

lexmarkcs748_firmwareRange≤lhs60.cm4.p737

AND

lexmarkcs748Match-

Node

lexmarkc792_firmwareRange≤lhs60.hc.p737

AND

lexmarkc792Match-

Node

lexmarkcs796_firmwareRange≤lhs60.hc.p737

AND

lexmarkcs796Match-

Node

lexmarkc925_firmwareRange≤lhs60.hv.p737

AND

lexmarkc925Match-

Node

lexmarkc950_firmwareRange≤lhs60.tp.p737

AND

lexmarkc950Match-

Node

lexmarkx548_firmwareRange≤lhs60.vk.p737

AND

lexmarkx548Match-

Node

lexmarkxs548_firmwareRange≤lhs60.vk.p737

AND

lexmarkxs548Match-

Node

lexmarkx74x_firmwareRange≤lhs60.ny.p737

AND

lexmarkx74xMatch-

Node

lexmarkxs748_firmwareRange≤lhs60.ny.p737

AND

lexmarkxs748Match-

Node

lexmarkx792_firmwareRange≤lhs60.mr.p737

AND

lexmarkx792Match-

Node

lexmarkxs79x_firmwareRange≤lhs60.mr.p737

AND

lexmarkxs79xMatch-

Node

lexmarkx925_firmwareRange≤lhs60.hk.p737

AND

lexmarkx925Match-

Node

lexmarkxs925_firmwareRange≤lhs60.hk.p737

AND

lexmarkxs925Match-

Node

lexmarkx95x_firmwareRange≤lhs60.tq.p737

AND

lexmarkx95xMatch-

Node

lexmarkxs95x_firmwareRange≤lhs60.tq.p737

AND

lexmarkxs95xMatch-

Node

lexmark6500e_firmwareRange≤lhs60.jr.p737

AND

lexmark6500eMatch-

Node

lexmarkc734_firmwareRange≤lr.sk.p824

AND

lexmarkc734Match-

Node

lexmarkc736_firmwareRange≤lr.ske.p824

AND

lexmarkc736Match-

Node

lexmarke46x_firmwareRange≤lr.lbh.p824

AND

lexmarke46xMatch-

Node

lexmarkt65x_firmwareRange≤lr.jp.p824

AND

lexmarkt65xMatch-

Node

lexmarkx46x_firmwareRange≤lr.bs.p824

AND

lexmarkx46xMatch-

Node

lexmarkx65x_firmwareRange≤lr.mn.p824

AND

lexmarkx65xMatch-

Node

lexmarkx73x_firmwareRange≤lr.fl.p824

AND

lexmarkx73xMatch-

Node

lexmarkw850_firmwareRange≤lp.jb.p823

AND

lexmarkw850Match-

Node

lexmarkx86x_firmwareRange≤lp.sp.p823

AND

lexmarkx86xMatch-

VendorProductVersionCPE
lexmarkcs31x_firmware*cpe:2.3:o:lexmark:cs31x_firmware:*:*:*:*:*:*:*:*
lexmarkcs31x-cpe:2.3:h:lexmark:cs31x:-:*:*:*:*:*:*:*
lexmarkcs41x_firmware*cpe:2.3:o:lexmark:cs41x_firmware:*:*:*:*:*:*:*:*
lexmarkcs41x-cpe:2.3:h:lexmark:cs41x:-:*:*:*:*:*:*:*
lexmarkcs51x_firmware*cpe:2.3:o:lexmark:cs51x_firmware:*:*:*:*:*:*:*:*
lexmarkcs51x-cpe:2.3:h:lexmark:cs51x:-:*:*:*:*:*:*:*
lexmarkcx310_firmware*cpe:2.3:o:lexmark:cx310_firmware:*:*:*:*:*:*:*:*
lexmarkcx310-cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*
lexmarkcx410_firmware*cpe:2.3:o:lexmark:cx410_firmware:*:*:*:*:*:*:*:*
lexmarkcx410-cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lexmark	cs31x_firmware	*	cpe:2.3:o:lexmark:cs31x_firmware::::::::
lexmark	cs31x	-	cpe:2.3:h:lexmark:cs31x:-:::::::*
lexmark	cs41x_firmware	*	cpe:2.3:o:lexmark:cs41x_firmware::::::::
lexmark	cs41x	-	cpe:2.3:h:lexmark:cs41x:-:::::::*
lexmark	cs51x_firmware	*	cpe:2.3:o:lexmark:cs51x_firmware::::::::
lexmark	cs51x	-	cpe:2.3:h:lexmark:cs51x:-:::::::*
lexmark	cx310_firmware	*	cpe:2.3:o:lexmark:cx310_firmware::::::::
lexmark	cx310	-	cpe:2.3:h:lexmark:cx310:-:::::::*
lexmark	cx410_firmware	*	cpe:2.3:o:lexmark:cx410_firmware::::::::
lexmark	cx410	-	cpe:2.3:h:lexmark:cx410:-:::::::*

Rows per page:

1-10 of 1601

References

support.lexmark.com/index?page=content&id=TE936

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2020-10094