CVE-2019-19772: XSS
Published Mar 6, 2020
·Updated
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=ENUS.
Affected Software
160 affected components
Lexmark Cs31x Firmware<=lw74.vyl.p267
Lexmark CS31x
Lexmark Cs41x Firmware<=lw74.vy2.p267
Lexmark CS41x
Lexmark Cs51x Firmware<=lw74.vy4.p267
Lexmark CS51x
Lexmark Cx310 Firmware<=lw74.gm2.p267
Lexmark CX310
Lexmark Cx410 Firmware<=lw74.gm4.p267
Lexmark CX410
Lexmark Xc2130 Firmware<=lw74.gm4.p267
Lexmark XC2130
Lexmark Cx510 Firmware<=lw74.gm7.p267
Lexmark CX510
Lexmark Xc2132 Firmware<=lw74.gm7.p267
Lexmark XC2132
Lexmark Ms310 Firmware<=lw74.prl.p267
Lexmark MS310
Lexmark Ms312 Firmware<=lw74.prl.p267
Lexmark MS312
Lexmark Ms317 Firmware<=lw74.prl.p267
Lexmark MS317
Lexmark Ms410 Firmware<=lw74.prl.p267
Lexmark MS410
Lexmark M1140 Firmware<=lw74.prl.p267
Lexmark M1140
Lexmark Ms315 Firmware<=lw74.tl2.p267
Lexmark MS315
Lexmark Ms415 Firmware<=lw74.tl2.p267
Lexmark MS415
Lexmark Ms417 Firmware<=lw74.tl2.p267
Lexmark MS417
Lexmark Ms51x Firmware<=lw74.pr2.p267
Lexmark MS51x
Lexmark Ms610dn Firmware<=lw74.pr2.p267
Lexmark MS610dn
Lexmark Ms617 Firmware<=lw74.pr2.p267
Lexmark MS617
Lexmark M1145 Firmware<=lw74.pr2.p267
Lexmark M1145
Lexmark M3150dn Firmware<=lw74.pr2.p267
Lexmark M3150dn
Lexmark Ms610de Firmware<=lw74.pr4.p267
Lexmark MS610de
Lexmark M3150 Firmware<=lw74.pr4.p267
Lexmark M3150
Lexmark Ms71x Firmware<=lw74.dn2.p267
Lexmark MS71x
Lexmark M5163dn Firmware<=lw74.dn2.p267
Lexmark M5163dn
Lexmark Ms810 Firmware<=lw74.dn2.p267
Lexmark MS810
Lexmark Ms811 Firmware<=lw74.dn2.p267
Lexmark MS811
Lexmark Ms812 Firmware<=lw74.dn2.p267
Lexmark MS812
Lexmark Ms817 Firmware<=lw74.dn2.p267
Lexmark MS817
Lexmark Ms818 Firmware<=lw74.dn2.p267
Lexmark MS818
Lexmark Ms810de Firmware<=lw74.dn4.p267
Lexmark MS810de
Lexmark M5155 Firmware<=lw74.dn4.p267
Lexmark M5155
Lexmark M5163 Firmware<=lw74.dn4.p267
Lexmark M5163
Lexmark Ms812de Firmware<=lw74.dn7.p267
Lexmark MS812de
Lexmark M5170 Firmware<=lw74.dn7.p267
Lexmark M5170
Lexmark Ms91x Firmware<=lw74.sa.p267
Lexmark MS91x
Lexmark Mx31x Firmware<=lw74.sb2.p267
Lexmark MX31x
Lexmark Xm1135 Firmware<=lw74.sb2.p267
Lexmark XM1135
Lexmark Mx410 Firmware<=lw74.sb4.p267
Lexmark MX410
Lexmark Mx510 Firmware<=lw74.sb4.p267
Lexmark MX510
Lexmark Mx511 Firmware<=lw74.sb4.p267
Lexmark MX511
Lexmark Xm1140 Firmware<=lw74.sb4.p267
Lexmark XM1140
Lexmark Xm1145 Firmware<=lw74.sb4.p267
Lexmark XM1145
Lexmark Mx610 Firmware<=lw74.sb7.p267
Lexmark MX610
Lexmark Mx611 Firmware<=lw74.sb7.p267
Lexmark MX611
Lexmark Xm3150 Firmware<=lw74.sb7.p267
Lexmark XM3150
Lexmark Mx71x Firmware<=lw74.tu.p267
Lexmark MX71x
Lexmark Mx81x Firmware<=lw74.tu.p267
Lexmark MX81x
Lexmark Xm51xx Firmware<=lw74.tu.p267
Lexmark XM51xx
Lexmark Xm71xx Firmware<=lw74.tu.p267
Lexmark XM71xx
Lexmark Mx91x Firmware<=lw74.mg.p267
Lexmark MX91x
Lexmark Xm91x Firmware<=lw74.mg.p267
Lexmark XM91x
Lexmark Mx6500e Firmware<=lw74.jd.p267
Lexmark MX6500e
Lexmark C746 Firmware<=lhs60.cm2.p731
Lexmark C746
Lexmark C748 Firmware<=lhs60.cm4.p735
Lexmark C748
Lexmark Cs748 Firmware<=lhs60.cm4.p735
Lexmark CS748
Lexmark C792 Firmware<=lhs60.hc.p735
Lexmark C792
Lexmark Cs796 Firmware<=lhs60.hc.p735
Lexmark CS796
Lexmark C925 Firmware<=lhs60.hv.p735
Lexmark C925
Lexmark C950 Firmware<=lhs60.tp.p735
Lexmark C950
Lexmark X548 Firmware<=lhs60.vk.p735
Lexmark X548
Lexmark Xs548 Firmware<=lhs60.vk.p735
Lexmark XS548
Lexmark X74x Firmware<=lhs60.ny.p735
Lexmark X74x
Lexmark Xs748 Firmware<=lhs60.ny.p735
Lexmark XS748
Lexmark X792 Firmware<=lhs60.mr.p735
Lexmark X792
Lexmark Xs79x Firmware<=lhs60.mr.p735
Lexmark XS79x
Lexmark X925 Firmware<=lhs60.hk.p735
Lexmark X925
Lexmark Xs925 Firmware<=lhs60.hk.p735
Lexmark XS925
Lexmark X95x Firmware<=lhs60.tq.p735
Lexmark X95x
Lexmark Xs95x Firmware<=lhs60.tq.p735
Lexmark XS95x
Lexmark 6500e Firmware<=lhs60.jr.p735
Lexmark 6500e
Lexmark C734 Firmware<=lr.sk.p822
Lexmark C734
Lexmark C736 Firmware<=lr.ske.p822
Lexmark C736
Lexmark E46x Firmware<=lr.lbh.p822
Lexmark E46x
Lexmark T65x Firmware<=lr.jp.p822
Lexmark T65x
Lexmark X46x Firmware<=lr.bs.p822
Lexmark X46x
Lexmark X65x Firmware<=lr.mn.p822
Lexmark X65x
Lexmark X73x Firmware<=lr.fl.p822
Lexmark X73x
Lexmark W850 Firmware<=lp.jb.p821
Lexmark W850
Lexmark X86x Firmware<=lp.sp.p821
Lexmark X86x
Event History
Mar 6, 2020
CVE Published
via MITRE·09:01 PM
Data Sourced
via MITRE·09:01 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19772?
CVE-2019-19772 has been categorized as a reflected cross-site scripting (XSS) vulnerability.
2
What products are affected by CVE-2019-19772?
CVE-2019-19772 affects various older generation Lexmark devices that utilize an embedded web server.
3
How do I fix CVE-2019-19772?
To address CVE-2019-19772, update the firmware of the affected Lexmark devices to the latest versions as recommended by Lexmark.
4
What methods can attackers use to exploit CVE-2019-19772?
Attackers can exploit CVE-2019-19772 by crafting malicious URLs that trigger the reflected XSS in the vulnerable Lexmark devices.
5
Are there any mitigations for CVE-2019-19772?
Mitigations for CVE-2019-19772 include restricting access to the web server from untrusted networks and applying firmware updates promptly.