CVE-2018-15519

EPSS 1.2%
Veröffentlicht 28.06.2019 17:15:11
Zuletzt bearbeitet 21.11.2024 03:50:59
Erkennungen
Login

Various Lexmark devices have a Buffer Overflow (issue 1 of 2).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 32 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Lexmark ≫ Cx310 Firmware Version <= lw70.gm2.p204

Lexmark ≫ Cx310 Version -

Lexmark ≫ Cx410 Firmware Version <= lw70.gm4.p204

Lexmark ≫ Cx410 Version -

Lexmark ≫ Cx510 Firmware Version <= lw70.gm7.p204

Lexmark ≫ Cx510 Version -

Lexmark ≫ Xc2132 Firmware Version <= lw70.gm7.p204

Lexmark ≫ Xc2132 Version -

Lexmark ≫ Mx31x Firmware Version <= lw70.sb2.p204

Lexmark ≫ Mx31x Version -

Lexmark ≫ Mx41x Firmware Version <= lw70.sb4.p204

Lexmark ≫ Mx41x Version -

Lexmark ≫ Mx51x Firmware Version <= lw70.sb4.p204

Lexmark ≫ Mx51x Version -

Lexmark ≫ Xm1145 Firmware Version <= lw70.sb4.p204

Lexmark ≫ Xm1145 Version -

Lexmark ≫ Mx61x Firmware Version <= lw70.sb7.p204

Lexmark ≫ Mx61x Version -

Lexmark ≫ Xm3150 Firmware Version <= lw70.sb7.p204

Lexmark ≫ Xm3150 Version -

Lexmark ≫ Mx71x Firmware Version <= lw70.tu.p204

Lexmark ≫ Mx71x Version -

Lexmark ≫ Mx81x Firmware Version <= lw70.tu.p204

Lexmark ≫ Mx81x Version -

Lexmark ≫ Xm51xx Firmware Version <= lw70.tu.p204

Lexmark ≫ Xm51xx Version -

Lexmark ≫ Xm71xx Firmware Version <= lw70.tu.p204

Lexmark ≫ Xm71xx Version -

Lexmark ≫ Mx91x Firmware Version <= lw70.mg.p204

Lexmark ≫ Mx91x Version -

Lexmark ≫ Xm91x Firmware Version <= lw70.mg.p204

Lexmark ≫ Xm91x Version -

Lexmark ≫ Mx6500 Firmware Version <= lw70.jd.p204

Lexmark ≫ Mx6500 Version -

Lexmark ≫ X54x Firmware Version <= lhs60.vk.p671

Lexmark ≫ X54x Version -

Lexmark ≫ Xs54x Firmware Version <= lhs60.vk.p671

Lexmark ≫ Xs54x Version -

Lexmark ≫ X74x Firmware Version <= lhs60.ny.p671

Lexmark ≫ X74x Version -

Lexmark ≫ Xs74x Firmware Version <= lhs60.ny.p671

Lexmark ≫ Xs74x Version -

Lexmark ≫ X79x Firmware Version <= lhs60.mr.p671

Lexmark ≫ X79x Version -

Lexmark ≫ Xs79x Firmware Version <= lhs60.mr.p671

Lexmark ≫ Xs79x Version -

Lexmark ≫ X92x Firmware Version <= lhs60.hk.p671

Lexmark ≫ X92x Version -

Lexmark ≫ Xs92x Firmware Version <= lhs60.hk.p671

Lexmark ≫ Xs92x Version -

Lexmark ≫ X95x Firmware Version <= lhs60.tq.p671

Lexmark ≫ X95x Version -

Lexmark ≫ Xs95x Firmware Version <= lhs60.tq.p671

Lexmark ≫ Xs95x Version -

Lexmark ≫ 6500 Firmware Version <= lhs60.jr.p671

Lexmark ≫ 6500 Version -

Lexmark ≫ X46x Firmware Version <= lr.bs.p803

Lexmark ≫ X46x Version -

Lexmark ≫ X65x Firmware Version <= lr.mn.p803

Lexmark ≫ X65x Version -

Lexmark ≫ X73x Firmware Version <= lr.fl.p803

Lexmark ≫ X73x Version -

Lexmark ≫ X86x Firmware Version <= lr.sp.p803

Lexmark ≫ X86x Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.2%	0.653

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://support.lexmark.com/index?page=content&id=TE892

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-15519

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-15519

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-15519

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-15519