9.8

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LexmarkCx82x Firmware Version <= cxtpp.052.024
   LexmarkCx82x Version-
LexmarkCx82x Firmware Version >= cxtpp.052.200 <= cxtpp.052.204
   LexmarkCx82x Version-
LexmarkCx860 Firmware Version <= cxtpp.052.024
   LexmarkCx860 Version-
LexmarkCx860 Firmware Version >= cxtpp.052.200 <= cxtpp.052.204
   LexmarkCx860 Version-
LexmarkXc6152 Firmware Version <= cxtpp.052.024
   LexmarkXc6152 Version-
LexmarkXc6152 Firmware Version >= cxtpp.052.200 <= cxtpp.052.204
   LexmarkXc6152 Version-
LexmarkXc8155 Firmware Version <= cxtpp.052.024
   LexmarkXc8155 Version-
LexmarkXc8155 Firmware Version >= cxtpp.052.200 <= cxtpp.052.204
   LexmarkXc8155 Version-
LexmarkXc8160 Firmware Version <= cxtpp.052.024
   LexmarkXc8160 Version-
LexmarkXc8160 Firmware Version >= cxtpp.052.200 <= cxtpp.052.204
   LexmarkXc8160 Version-
LexmarkCx72x Firmware Version <= cxtat.052.024
   LexmarkCx72x Version-
LexmarkCx72x Firmware Version >= cxtat.052.200 <= cxtat.052.204
   LexmarkCx72x Version-
LexmarkXc41x0 Firmware Version <= cxtat.052.024
   LexmarkXc41x0 Version-
LexmarkXc41x0 Firmware Version >= cxtat.052.200 <= cxtat.052.204
   LexmarkXc41x0 Version-
LexmarkCx92x Firmware Version <= cxtmh.052.024
   LexmarkCx92x Version-
LexmarkCx92x Firmware Version >= cxtmh.052.200 <= cxtmh.052.204
   LexmarkCx92x Version-
LexmarkXc92x5 Firmware Version <= cxtmh.052.024
   LexmarkXc92x5 Version-
LexmarkXc92x5 Firmware Version >= cxtmh.052.200 <= cxtmh.052.204
   LexmarkXc92x5 Version-
LexmarkMx321 Firmware Version <= mxngm.052.024
   LexmarkMx321 Version-
LexmarkMx321 Firmware Version >= mxngm.052.200 <= mxngm.052.204
   LexmarkMx321 Version-
LexmarkMb2338 Firmware Version <= mxngm.052.024
   LexmarkMb2338 Version-
LexmarkMb2338 Firmware Version >= mxngm.052.200 <= mxngm.052.204
   LexmarkMb2338 Version-
LexmarkMx42x Firmware Version <= mxtgm.052.024
   LexmarkMx42x Version-
LexmarkMx42x Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkMx42x Version-
LexmarkMx52x Firmware Version <= mxtgm.052.024
   LexmarkMx52x Version-
LexmarkMx52x Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkMx52x Version-
LexmarkMx622 Firmware Version <= mxtgm.052.024
   LexmarkMx622 Version-
LexmarkMx622 Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkMx622 Version-
LexmarkMb2442 Firmware Version <= mxtgm.052.024
   LexmarkMb2442 Version-
LexmarkMb2442 Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkMb2442 Version-
LexmarkMb2546 Firmware Version <= mxtgm.052.024
   LexmarkMb2546 Version-
LexmarkMb2546 Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkMb2546 Version-
LexmarkMb2650 Firmware Version <= mxtgm.052.024
   LexmarkMb2650 Version-
LexmarkMb2650 Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkMb2650 Version-
LexmarkXm124x Firmware Version <= mxtgm.052.024
   LexmarkXm124x Version-
LexmarkXm124x Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkXm124x Version-
LexmarkXm3250 Firmware Version <= mxtgm.052.024
   LexmarkXm3250 Version-
LexmarkXm3250 Firmware Version >= mxtgm.052.200 <= mxtgm.052.204
   LexmarkXm3250 Version-
LexmarkMx72x Firmware Version <= mxtgw.052.024
   LexmarkMx72x Version-
LexmarkMx72x Firmware Version >= mxtgw.052.200 <= mxtgw.052.204
   LexmarkMx72x Version-
LexmarkMx82x Firmware Version <= mxtgw.052.024
   LexmarkMx82x Version-
LexmarkMx82x Firmware Version >= mxtgw.052.200 <= mxtgw.052.204
   LexmarkMx82x Version-
LexmarkMb2770 Firmware Version <= mxtgw.052.024
   LexmarkMb2770 Version-
LexmarkMb2770 Firmware Version >= mxtgw.052.200 <= mxtgw.052.204
   LexmarkMb2770 Version-
LexmarkXm5370 Firmware Version <= mxtgw.052.024
   LexmarkXm5370 Version-
LexmarkXm5370 Firmware Version >= mxtgw.052.200 <= mxtgw.052.204
   LexmarkXm5370 Version-
LexmarkXm7355 Firmware Version <= mxtgw.052.024
   LexmarkXm7355 Version-
LexmarkXm7355 Firmware Version >= mxtgw.052.200 <= mxtgw.052.204
   LexmarkXm7355 Version-
LexmarkXm7370 Firmware Version <= mxtgw.052.024
   LexmarkXm7370 Version-
LexmarkXm7370 Firmware Version >= mxtgw.052.200 <= mxtgw.052.204
   LexmarkXm7370 Version-
LexmarkCx421 Firmware Version <= cxnzj.052.024
   LexmarkCx421 Version-
LexmarkCx421 Firmware Version >= cxnzj.052.200 <= cxnzj.052.204
   LexmarkCx421 Version-
LexmarkMc2325 Firmware Version <= cxnzj.052.024
   LexmarkMc2325 Version-
LexmarkMc2325 Firmware Version >= cxnzj.052.200 <= cxnzj.052.204
   LexmarkMc2325 Version-
LexmarkMc2425 Firmware Version <= cxnzj.052.024
   LexmarkMc2425 Version-
LexmarkMc2425 Firmware Version >= cxnzj.052.200 <= cxnzj.052.204
   LexmarkMc2425 Version-
LexmarkCx522 Firmware Version <= cxtzj.052.024
   LexmarkCx522 Version-
LexmarkCx522 Firmware Version >= cxtzj.052.200 <= cxtzj.052.204
   LexmarkCx522 Version-
LexmarkCx62x Firmware Version <= cxtzj.052.024
   LexmarkCx62x Version-
LexmarkCx62x Firmware Version >= cxtzj.052.200 <= cxtzj.052.204
   LexmarkCx62x Version-
LexmarkMc2535 Firmware Version <= cxtzj.052.024
   LexmarkMc2535 Version-
LexmarkMc2535 Firmware Version >= cxtzj.052.200 <= cxtzj.052.204
   LexmarkMc2535 Version-
LexmarkMc2640 Firmware Version <= cxtzj.052.024
   LexmarkMc2640 Version-
LexmarkMc2640 Firmware Version >= cxtzj.052.200 <= cxtzj.052.204
   LexmarkMc2640 Version-
LexmarkXc2235 Firmware Version <= cxtzj.052.024
   LexmarkXc2235 Version-
LexmarkXc2235 Firmware Version >= cxtzj.052.200 <= cxtzj.052.204
   LexmarkXc2235 Version-
LexmarkXc4240 Firmware Version <= cxtzj.052.024
   LexmarkXc4240 Version-
LexmarkXc4240 Firmware Version >= cxtzj.052.200 <= cxtzj.052.204
   LexmarkXc4240 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.65
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.