CVE-2019-10059: Medium severity lexmark cs31x firmware vulnerability
Published Aug 28, 2019
·Updated
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
Affected Software
142 affected components
Lexmark Cs31x Firmware<=lw71.vyl.p233
Lexmark CS31x
Lexmark Cs41x Firmware<=lw71.vy2.p233
Lexmark CS41x
Lexmark Cx310 Firmware<=lw71.gm2.p233
Lexmark CX310
Lexmark Ms310 Firmware<=lw71.prl.p233
Lexmark MS310
Lexmark Ms312 Firmware<=lw71.prl.p233
Lexmark MS312
Lexmark Ms317 Firmware<=lw71.prl.p233
Lexmark MS317
Lexmark Ms410 Firmware<=lw71.prl.p233
Lexmark MS410
Lexmark M1140 Firmware<=lw71.prl.p233
Lexmark M1140
Lexmark Ms315 Firmware<=lw71.tl2.p233
Lexmark MS315
Lexmark Ms415 Firmware<=lw71.tl2.p233
Lexmark MS415
Lexmark Ms417 Firmware<=lw71.tl2.p233
Lexmark MS417
Lexmark Ms51x Firmware<=lw71.pr2.p233
Lexmark MS51x
Lexmark Ms610dn Firmware<=lw71.pr2.p233
Lexmark MS610dn
Lexmark Ms617 Firmware<=lw71.pr2.p233
Lexmark MS617
Lexmark M1145 Firmware<=lw71.pr2.p233
Lexmark M1145
Lexmark M3150dn Firmware<=lw71.pr2.p233
Lexmark M3150dn
Lexmark Ms71x Firmware<=lw71.dn2.p233
Lexmark MS71x
Lexmark M5163dn Firmware<=lw71.dn2.p233
Lexmark M5163dn
Lexmark Ms810 Firmware<=lw71.dn2.p233
Lexmark MS810
Lexmark Ms811 Firmware<=lw71.dn2.p233
Lexmark MS811
Lexmark Ms812 Firmware<=lw71.dn2.p233
Lexmark MS812
Lexmark Ms817 Firmware<=lw71.dn2.p233
Lexmark MS817
Lexmark Ms818 Firmware<=lw71.dn2.p233
Lexmark MS818
Lexmark Ms810de Firmware<=lw71.dn4.p233
Lexmark MS810de
Lexmark M5155 Firmware<=lw71.dn4.p233
Lexmark M5155
Lexmark M5163 Firmware<=lw71.dn4.p233
Lexmark M5163
Lexmark Ms812de Firmware<=lw71.dn7.p233
Lexmark MS812de
Lexmark M5170 Firmware<=lw71.dn7.p233
Lexmark M5170
Lexmark Ms91x Firmware<=lw71.sa.p233
Lexmark MS91x
Lexmark Mx31x Firmware<=lw71.sb2.p233
Lexmark MX31x
Lexmark Xm1135 Firmware<=lw71.sb2.p233
Lexmark XM1135
Lexmark Mx410 Firmware<=lw71.sb4.p233
Lexmark MX410
Lexmark Mx510 Firmware<=lw71.sb4.p233
Lexmark MX510
Lexmark Mx511 Firmware<=lw71.sb4.p233
Lexmark MX511
Lexmark Mx610 Firmware<=lw71.sb7.p233
Lexmark MX610
Lexmark Mx611 Firmware<=lw71.sb7.p233
Lexmark MX611
Lexmark Xm3150 Firmware<=lw71.sb7.p233
Lexmark XM3150
Lexmark Mx71x Firmware<=lw71.tu.p233
Lexmark MX71x
Lexmark Mx81x Firmware<=lw71.tu.p233
Lexmark MX81x
Lexmark Xm51xx Firmware<=lw71.tu.p233
Lexmark XM51xx
Lexmark Xm71xx Firmware<=lw71.tu.p233
Lexmark XM71xx
Lexmark Mx91x Firmware<=lw71.mg.p233
Lexmark MX91x
Lexmark Xm91x Firmware<=lw71.mg.p233
Lexmark XM91x
Lexmark Mx6500e Firmware<=lw71.jd.p233
Lexmark MX6500e
Lexmark C746 Firmware<=lhs60.cm2.p705
Lexmark C746
Lexmark C748 Firmware<=lhs60.cm4.p705
Lexmark C748
Lexmark Cs748 Firmware<=lhs60.cm4.p705
Lexmark CS748
Lexmark C792 Firmware<=lhs60.hc.p705
Lexmark C792
Lexmark Cs796 Firmware<=lhs60.hc.p705
Lexmark CS796
Lexmark C925 Firmware<=lhs60.hv.p705
Lexmark C925
Lexmark C950 Firmware<=lhs60.tp.p705
Lexmark C950
Lexmark X548 Firmware<=lhs60.vk.p705
Lexmark X548
Lexmark Xs548 Firmware<=lhs60.vk.p705
Lexmark XS548
Lexmark X74x Firmware<=lhs60.ny.p705
Lexmark X74x
Lexmark Xs748 Firmware<=lhs60.ny.p705
Lexmark XS748
Lexmark X792 Firmware<=lhs60.mr.p705
Lexmark X792
Lexmark Xs79x Firmware<=lhs60.mr.p705
Lexmark XS79x
Lexmark X925 Firmware<=lhs60.hk.p705
Lexmark X925
Lexmark Xs925 Firmware<=lhs60.hk.p705
Lexmark XS925
Lexmark X95x Firmware<=lhs60.tq.p705
Lexmark X95x
Lexmark Xs95x Firmware<=lhs60.tq.p705
Lexmark XS95x
Lexmark 6500e Firmware<=lhs60.jr.p705
Lexmark 6500e
Lexmark C734 Firmware<=lr.sk.p815
Lexmark C734
Lexmark C736 Firmware<=lr.ske.p815
Lexmark C736
Lexmark E46x Firmware<=lr.lbh.p815
Lexmark E46x
Lexmark T65x Firmware<=lr.jp.p815
Lexmark T65x
Lexmark X46x Firmware<=lr.bs.p815
Lexmark X46x
Lexmark X65x Firmware<=lr.mn.p815
Lexmark X65x
Lexmark X73x Firmware<=lr.fl.p815
Lexmark X73x
Lexmark W850 Firmware<=lp.jb.p815
Lexmark W850
Lexmark X86x Firmware<=lp.sp.p815
Lexmark X86x
Event History
Aug 28, 2019
CVE Published
via MITRE·09:28 PM
Data Sourced
via MITRE·09:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-10059?
CVE-2019-10059 has a medium severity score due to the potential for unauthorized access through the legacy finger service.
2
How do I fix CVE-2019-10059?
To fix CVE-2019-10059, you should disable the legacy finger service on affected Lexmark devices.
3
Which Lexmark devices are affected by CVE-2019-10059?
CVE-2019-10059 affects various older Lexmark devices with specific firmware versions enabled.
4
What potential risks are associated with CVE-2019-10059?
The risk associated with CVE-2019-10059 includes unauthorized access to device information through an unsecured service.
5
Is there a workaround for CVE-2019-10059?
Yes, a workaround for CVE-2019-10059 is to change the default settings to disable the finger service.