Vulmon Recent Vulnerabilities Discussions Trends Blog About Contact
6.4
CVSSv2

CVE-2019-6489

Published: 11/02/2019 Updated: 14/02/2019
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P

Vulnerability Summary

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices prior to 2019-02-11 allow remote attackers to erase stored shortcuts.

Vulnerability Trend

Affected Products

Vendor Product Versions
Lexmark6500e FirmwareLhs60.jr.p809
LexmarkCx310 FirmwareLw71.gm2.p216
LexmarkCx410 FirmwareLw71.gm4.p216
LexmarkCx510 FirmwareLw71.gm7.p216
LexmarkMx31x FirmwareLw71.sb2.p216
LexmarkMx410 FirmwareLw71.sb4.p216
LexmarkMx510 FirmwareLw71.sb4.p216
LexmarkMx511 FirmwareLw71.sb4.p216
LexmarkMx610 FirmwareLw71.sb7.p216
LexmarkMx611 FirmwareLw71.sb7.p216
LexmarkMx6500e FirmwareLw71.jd.p216
LexmarkMx71x FirmwareLw71.tu.p216
LexmarkMx81x FirmwareLw71.tu.p216
LexmarkMx91x FirmwareLw71.mg.p216
LexmarkX46x FirmwareLr.bs.p809
LexmarkX548 FirmwareLhs60.vk.p682
LexmarkX65x FirmwareLr.mn.p809
LexmarkX73x FirmwareLr.fl.p809
LexmarkX74x FirmwareLhs60.ny.p682
LexmarkX792 FirmwareLhs60.mr.p682
LexmarkX86x FirmwareLp.sp.p809
LexmarkX925 FirmwareLhs60.hk.p682
LexmarkX95x FirmwareLhs60.tq.p682
LexmarkXc2132 FirmwareLw71.gm7.p216
LexmarkXm1145 FirmwareLw71.sb4.p216
LexmarkXm3150 FirmwareLw71.sb7.p216
LexmarkXm5163 FirmwareLw71.tu.p216
LexmarkXm5170 FirmwareLw71.tu.p216
LexmarkXm7155 FirmwareLw71.tu.p216
LexmarkXm7155x FirmwareLw71.tu.p216
LexmarkXm7163 FirmwareLw71.tu.p216
LexmarkXm7163x FirmwareLw71.tu.p216
LexmarkXm7170 FirmwareLw71.tu.p216
LexmarkXm7170x FirmwareLw71.tu.p216
LexmarkXm91x FirmwareLw71.mg.p216
LexmarkXs548 FirmwareLhs60.vk.p682
LexmarkXs748 FirmwareLhs60.ny.p682
LexmarkXs79x FirmwareLhs60.mr.p682
LexmarkXs925 FirmwareLhs60.hk.p682
LexmarkXs95x FirmwareLhs60.tq.p682

References

CWE-20http://support.lexmark.com/index?page=content&id=TE912https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2019-7238CVE-2019-2136hardcodedCVE-2019-8095XPath injectionCVE-2019-8028template injectionCVE-2019-1181CVE-2019-8046