Back to Database
Status published
Medium
CVE-2019-18791
Lexmark printer MS812 and multiple older generation Lexmark devices have...
Vulnerability Description
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18791
Credits & Attribution
No credits recorded in the NVD database.
References
More from lexmark
View All →CVE-2022-29850
Various Lexmark products through 2022-04-27 allow an attacker who has...
High
8.1
CVE-2022-24935
Lexmark products through 2022-02-10 have Incorrect Access Control....
High
7.5
CVE-2021-44738
Buffer overflow vulnerability has been identified in Lexmark devices through...
Critical
9.8
CVE-2021-44737
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that...
High
8.8
CVE-2021-44736
The initial admin account setup wizard on Lexmark devices allow...
Critical
9.8
Affected Vendor
lexmark
View all reports →Affected Software
cx31x firmware, cx41x firmware, cx310 firmware, ms310 firmware, ms312 firmware, ms317 firmware, ms410 firmware, m1140 firmware, ms315 firmware, ms415 firmware, ms417 firmware, ms51x firmware, ms610dn firmware, ms617 firmware, m1145 firmware, m3150dn firmware, ms71x firmware, m5163dn firmware, ms810 firmware, ms811 firmware, ms812 firmware, ms817 firmware, ms818 firmware, ms810de firmware, m5155 firmware, m5163 firmware, ms812de firmware, m5170 firmware, ms91x firmware, mx31x firmware, xm1135 firmware, mx410 firmware, mx510 firmware, mx511 firmware, mx610 firmware, mx611 firmware, xm3150 firmware, mx71x firmware, mx81x firmware, xm51xx firmware, xm71xx firmware, mx91x firmware, xm91x firmware, mx6500e firmware, c746 firmware, c748 firmware, cs748 firmware, c792 firmware, cs796 firmware, c925 firmware, c950 firmware, x548 firmware, xs548 firmware, x74x firmware, xs748 firmware, x792 firmware, xs79x firmware, x925 firmware, xs925 firmware, x95x firmware, xs95x firmware, 6500e firmware, c734 firmware, c736 firmware, e46x firmware, t65x firmware, x46x firmware, x65x firmware, x73x firmware, w850 firmware, x86x firmware, cx410 firmware, xc2130 firmware, cx510 firmware, xc2132 firmware, cx51x firmware, ms610de firmware, m3150 firmware, xm1140 firmware, xm1145 firmware
Vulnerable Versions:
0
Timeline
Official Publish:
February 13th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.