CVE-2019-16758: Path Traversal
First published: Thu Nov 21 2019(Updated: )
In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lexmark Services Monitor Firmware | =2.27.4.0.39 | |
| Lexmark Services Monitor |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/155365/Lexmark-Services-Monitor-2.27.4.0.39-Directory-Traversal.html
- http://seclists.org/fulldisclosure/2019/Nov/17
- http://support.lexmark.com/index?page=content&id=TE930&locale=en&userlocale=EN_US
- https://www.symantec.com/security-center/vulnerabilities/writeup/110943
Frequently Asked Questions
What is the vulnerability ID for Lexmark Services Monitor?
The vulnerability ID for Lexmark Services Monitor is CVE-2019-16758.
What is the severity level of CVE-2019-16758?
The severity level of CVE-2019-16758 is high.
How can a remote attacker exploit CVE-2019-16758?
A remote attacker can exploit CVE-2019-16758 by using a directory traversal technique to obtain local files on the host operating system.
What software versions are affected by CVE-2019-16758?
The Lexmark Services Monitor firmware version 2.27.4.0.39 is affected by CVE-2019-16758.
Is Lexmark Services Monitor vulnerable to CVE-2019-16758?
Yes, Lexmark Services Monitor version 2.27.4.0.39 is vulnerable to CVE-2019-16758.
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- vendor/lexmark
- canonical/lexmark services monitor firmware
- version/lexmark services monitor firmware/2.27.4.0.39
- canonical/lexmark services monitor