9.8

CVE-2018-15519

Various Lexmark devices have a Buffer Overflow (issue 1 of 2).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lexmark ≫ Cx310 Firmware Version <= lw70.gm2.p204
   Lexmark ≫ Cx310 Version-
Lexmark ≫ Cx410 Firmware Version <= lw70.gm4.p204
   Lexmark ≫ Cx410 Version-
Lexmark ≫ Cx510 Firmware Version <= lw70.gm7.p204
   Lexmark ≫ Cx510 Version-
Lexmark ≫ Xc2132 Firmware Version <= lw70.gm7.p204
   Lexmark ≫ Xc2132 Version-
Lexmark ≫ Mx31x Firmware Version <= lw70.sb2.p204
   Lexmark ≫ Mx31x Version-
Lexmark ≫ Mx41x Firmware Version <= lw70.sb4.p204
   Lexmark ≫ Mx41x Version-
Lexmark ≫ Mx51x Firmware Version <= lw70.sb4.p204
   Lexmark ≫ Mx51x Version-
Lexmark ≫ Xm1145 Firmware Version <= lw70.sb4.p204
   Lexmark ≫ Xm1145 Version-
Lexmark ≫ Mx61x Firmware Version <= lw70.sb7.p204
   Lexmark ≫ Mx61x Version-
Lexmark ≫ Xm3150 Firmware Version <= lw70.sb7.p204
   Lexmark ≫ Xm3150 Version-
Lexmark ≫ Mx71x Firmware Version <= lw70.tu.p204
   Lexmark ≫ Mx71x Version-
Lexmark ≫ Mx81x Firmware Version <= lw70.tu.p204
   Lexmark ≫ Mx81x Version-
Lexmark ≫ Xm51xx Firmware Version <= lw70.tu.p204
   Lexmark ≫ Xm51xx Version-
Lexmark ≫ Xm71xx Firmware Version <= lw70.tu.p204
   Lexmark ≫ Xm71xx Version-
Lexmark ≫ Mx91x Firmware Version <= lw70.mg.p204
   Lexmark ≫ Mx91x Version-
Lexmark ≫ Xm91x Firmware Version <= lw70.mg.p204
   Lexmark ≫ Xm91x Version-
Lexmark ≫ Mx6500 Firmware Version <= lw70.jd.p204
   Lexmark ≫ Mx6500 Version-
Lexmark ≫ X54x Firmware Version <= lhs60.vk.p671
   Lexmark ≫ X54x Version-
Lexmark ≫ Xs54x Firmware Version <= lhs60.vk.p671
   Lexmark ≫ Xs54x Version-
Lexmark ≫ X74x Firmware Version <= lhs60.ny.p671
   Lexmark ≫ X74x Version-
Lexmark ≫ Xs74x Firmware Version <= lhs60.ny.p671
   Lexmark ≫ Xs74x Version-
Lexmark ≫ X79x Firmware Version <= lhs60.mr.p671
   Lexmark ≫ X79x Version-
Lexmark ≫ Xs79x Firmware Version <= lhs60.mr.p671
   Lexmark ≫ Xs79x Version-
Lexmark ≫ X92x Firmware Version <= lhs60.hk.p671
   Lexmark ≫ X92x Version-
Lexmark ≫ Xs92x Firmware Version <= lhs60.hk.p671
   Lexmark ≫ Xs92x Version-
Lexmark ≫ X95x Firmware Version <= lhs60.tq.p671
   Lexmark ≫ X95x Version-
Lexmark ≫ Xs95x Firmware Version <= lhs60.tq.p671
   Lexmark ≫ Xs95x Version-
Lexmark ≫ 6500 Firmware Version <= lhs60.jr.p671
   Lexmark ≫ 6500 Version-
Lexmark ≫ X46x Firmware Version <= lr.bs.p803
   Lexmark ≫ X46x Version-
Lexmark ≫ X65x Firmware Version <= lr.mn.p803
   Lexmark ≫ X65x Version-
Lexmark ≫ X73x Firmware Version <= lr.fl.p803
   Lexmark ≫ X73x Version-
Lexmark ≫ X86x Firmware Version <= lr.sp.p803
   Lexmark ≫ X86x Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.65
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.