CVE-2019-10058

Various Lexmark products have Incorrect Access Control...

CVE-2019-10058

CVE-2019-10058 affects Lexmark printers; root cause is Incorrect Access Control due to lack of account lockout implemented on certain Lexmark devices. Documented across multiple sources (Threatpost/NVD) with references to Lexmark-specific advisories and NCC Group findings. Impact is described as ...

CVE-2019-9935

Mode C: CVE-2019-9935 affects Lexmark printers and is described as an Incorrect Access Control vulnerability leading to missing authentication for critical functions. Connected sources reference unauthenticated access to restricted menus and critical functions across various Lexmark devices, with...

CVE-2019-9935

Various Lexmark products have Incorrect Access Control issue 2 of 2...

CVE-2019-9934

Various Lexmark products have Incorrect Access Control issue 1 of 2...

CVE-2019-9934

CVE-2019-9934 affects various Lexmark printers with an Incorrect Access Control flaw (also described as missing authentication for critical functions). Connected sources consistently identify unauthenticated access to restricted menus and functions as the issue, implying potential disclosure or m...

Buffer Overflow Vulnerability in Multiple Lexmark Products

The Lexmark CX310, among others, is a multifunction printer from Lexmark USA. A buffer overflow vulnerability exists in multiple Lexmark products. An attacker could exploit this vulnerability to cause a buffer overflow or heap overflow, among others...

CVE-2018-15519

Various Lexmark devices have a Buffer Overflow issue 1 of 2...

CVE-2018-15519

Various Lexmark devices have a Buffer Overflow issue 1 of 2...

Buffer overflow

Various Lexmark devices have a Buffer Overflow issue 1 of 2...

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

Buffer overflow

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

CVE-2018-15519

Summary: CVE-2018-15519 affects Lexmark devices (printers/multi-function devices). The issue is a buffer overflow caused by improper restriction of operations within the bounds of a memory buffer (described as “issue 1 of 2” in multiple sources). The NVD and OpenVAS entries indicate high/severe i...

CVE-2018-15519

Various Lexmark devices have a Buffer Overflow issue 1 of 2...

CVE-2018-15520

CVE-2018-15520 affects various Lexmark devices with a memory buffer overflow vulnerability. The issue is described as a buffer overflow in the device’s operations, with a network-based attack vector and no authentication required (CVSS2/3: 7.5/9.8; high/critical). The root cause is improper restr...

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

Design/Logic Flaw

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are...

CVE-2018-17944

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are...

CVE-2018-17944

CVE-2018-17944 affects certain Lexmark devices that communicate with LDAP or SMTP servers. The vulnerability occurs because stored credentials are not automatically deleted when the server hostname is changed to one controlled by an attacker, allowing the attacker to capture LDAP/SMTP credentials...