CVE-2019-18791: XSS
Published Feb 13, 2020
·Updated
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
Affected Software
160 affected components
Lexmark Cx31x Firmware<=lw73.vyl.p263
Lexmark Cx31x
Lexmark Cx41x Firmware<=lw73.vy2.p263
Lexmark Cx41x
Lexmark Cx310 Firmware<=lw73.gm2.p263
Lexmark CX310
Lexmark Ms310 Firmware<=lw73.prl.p263
Lexmark MS310
Lexmark Ms312 Firmware<=lw73.prl.p263
Lexmark MS312
Lexmark Ms317 Firmware<=lw73.prl.p263
Lexmark MS317
Lexmark Ms410 Firmware<=lw73.prl.p263
Lexmark MS410
Lexmark M1140 Firmware<=lw73.prl.p263
Lexmark M1140
Lexmark Ms315 Firmware<=lw73.tl2.p263
Lexmark MS315
Lexmark Ms415 Firmware<=lw73.tl2.p263
Lexmark MS415
Lexmark Ms417 Firmware<=lw73.tl2.p263
Lexmark MS417
Lexmark Ms51x Firmware<=lw73.pr2.p263
Lexmark MS51x
Lexmark Ms610dn Firmware<=lw73.pr2.p263
Lexmark MS610dn
Lexmark Ms617 Firmware<=lw73.pr2.p263
Lexmark MS617
Lexmark M1145 Firmware<=lw73.pr2.p263
Lexmark M1145
Lexmark M3150dn Firmware<=lw73.pr2.p263
Lexmark M3150dn
Lexmark Ms71x Firmware<=lw73.dn2.p263
Lexmark MS71x
Lexmark M5163dn Firmware<=lw73.dn2.p263
Lexmark M5163dn
Lexmark Ms810 Firmware<=lw73.dn2.p263
Lexmark MS810
Lexmark Ms811 Firmware<=lw73.dn2.p263
Lexmark MS811
Lexmark Ms812 Firmware<=lw73.dn2.p263
Lexmark MS812
Lexmark Ms817 Firmware<=lw73.dn2.p263
Lexmark MS817
Lexmark Ms818 Firmware<=lw73.dn2.p263
Lexmark MS818
Lexmark Ms810de Firmware<=lw73.dn4.p263
Lexmark MS810de
Lexmark M5155 Firmware<=lw73.dn4.p263
Lexmark M5155
Lexmark M5163 Firmware<=lw73.dn4.p263
Lexmark M5163
Lexmark Ms812de Firmware<=lw73.dn7.p263
Lexmark MS812de
Lexmark M5170 Firmware<=lw73.dn7.p263
Lexmark M5170
Lexmark Ms91x Firmware<=lw73.sa.p263
Lexmark MS91x
Lexmark Mx31x Firmware<=lw73.sb2.p263
Lexmark MX31x
Lexmark Xm1135 Firmware<=lw73.sb2.p263
Lexmark XM1135
Lexmark Mx410 Firmware<=lw73.sb4.p263
Lexmark MX410
Lexmark Mx510 Firmware<=lw73.sb4.p263
Lexmark MX510
Lexmark Mx511 Firmware<=lw73.sb4.p263
Lexmark MX511
Lexmark Mx610 Firmware<=lw73.sb7.p263
Lexmark MX610
Lexmark Mx611 Firmware<=lw73.sb7.p263
Lexmark MX611
Lexmark Xm3150 Firmware<=lw73.sb7.p263
Lexmark XM3150
Lexmark Mx71x Firmware<=lw73.tu.p263
Lexmark MX71x
Lexmark Mx81x Firmware<=lw73.tu.p263
Lexmark MX81x
Lexmark Xm51xx Firmware<=lw73.tu.p263
Lexmark XM51xx
Lexmark Xm71xx Firmware<=lw73.tu.p263
Lexmark XM71xx
Lexmark Mx91x Firmware<=lw73.mg.p263
Lexmark MX91x
Lexmark Xm91x Firmware<=lw73.mg.p263
Lexmark XM91x
Lexmark Mx6500e Firmware<=lw73.jd.p263
Lexmark MX6500e
Lexmark C746 Firmware<=lhs60.cm2.p731
Lexmark C746
Lexmark C748 Firmware<=lhs60.cm4.p731
Lexmark C748
Lexmark Cs748 Firmware<=lhs60.cm4.p731
Lexmark CS748
Lexmark C792 Firmware<=lhs60.hc.p731
Lexmark C792
Lexmark Cs796 Firmware<=lhs60.hc.p731
Lexmark CS796
Lexmark C925 Firmware<=lhs60.hv.p731
Lexmark C925
Lexmark C950 Firmware<=lhs60.tp.p731
Lexmark C950
Lexmark X548 Firmware<=lhs60.vk.p731
Lexmark X548
Lexmark Xs548 Firmware<=lhs60.vk.p731
Lexmark XS548
Lexmark X74x Firmware<=lhs60.ny.p731
Lexmark X74x
Lexmark Xs748 Firmware<=lhs60.ny.p731
Lexmark XS748
Lexmark X792 Firmware<=lhs60.mr.p731
Lexmark X792
Lexmark Xs79x Firmware<=lhs60.mr.p731
Lexmark XS79x
Lexmark X925 Firmware<=lhs60.hk.p731
Lexmark X925
Lexmark Xs925 Firmware<=lhs60.hk.p731
Lexmark XS925
Lexmark X95x Firmware<=lhs60.tq.p731
Lexmark X95x
Lexmark Xs95x Firmware<=lhs60.tq.p731
Lexmark XS95x
Lexmark 6500e Firmware<=lhs60.jr.p731
Lexmark 6500e
Lexmark C734 Firmware<=lr.sk.p822
Lexmark C734
Lexmark C736 Firmware<=lr.ske.p822
Lexmark C736
Lexmark E46x Firmware<=lr.lbh.p822
Lexmark E46x
Lexmark T65x Firmware<=lr.jp.p822
Lexmark T65x
Lexmark X46x Firmware<=lr.bs.p822
Lexmark X46x
Lexmark X65x Firmware<=lr.mn.p822
Lexmark X65x
Lexmark X73x Firmware<=lr.fl.p822
Lexmark X73x
Lexmark W850 Firmware<=lp.jb.p821
Lexmark W850
Lexmark X86x Firmware<=lp.sp.p821
Lexmark X86x
Lexmark Cx410 Firmware<=lw73.gm4.p263
Lexmark CX410
Lexmark Xc2130 Firmware<=lw73.gm4.p263
Lexmark XC2130
Lexmark Cx510 Firmware<=lw73.gm7.p263
Lexmark CX510
Lexmark Xc2132 Firmware<=lw73.gm7.p263
Lexmark XC2132
Lexmark Cx51x Firmware<=lw73.vy4.p263
Lexmark Cx51x
Lexmark Ms610de Firmware<=lw73.pr4.p263
Lexmark MS610de
Lexmark M3150 Firmware<=lw73.pr4.p263
Lexmark M3150
Lexmark Xm1140 Firmware<=lw73.sb4.p263
Lexmark XM1140
Lexmark Xm1145 Firmware<=lw73.sb4.p263
Lexmark XM1145
Event History
Feb 13, 2020
CVE Published
via MITRE·03:01 PM
Data Sourced
via MITRE·03:01 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18791?
CVE-2019-18791 is classified as a medium severity vulnerability due to the potential exposure of session credentials through stored XSS in Lexmark printers.
2
How do I fix CVE-2019-18791?
To fix CVE-2019-18791, Lexmark recommends updating the affected firmware to the latest version available for your printer model.
3
Which Lexmark devices are affected by CVE-2019-18791?
Affected devices include certain Lexmark MS812 models and multiple older generation Lexmark printers with specific firmware versions.
4
What type of vulnerability is CVE-2019-18791?
CVE-2019-18791 is a stored cross-site scripting (XSS) vulnerability located in the embedded web server of affected Lexmark printers.
5
What could an attacker achieve with CVE-2019-18791?
An attacker exploiting CVE-2019-18791 could potentially expose session credentials and other sensitive information through a user's web browser.