CVE-2019-19772 - CVE House

Status published Medium CVE-2019-19772

Various Lexmark products have reflected XSS in the embedded web...

5.4 CVSS

Vulnerability Description

Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-19772

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US

More from lexmark

View All →

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has...

High 8.1

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control....

High 7.5

CVE-2021-44738

Buffer overflow vulnerability has been identified in Lexmark devices through...

Critical 9.8

CVE-2021-44737

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that...

High 8.8

CVE-2021-44736

The initial admin account setup wizard on Lexmark devices allow...

Critical 9.8

Affected Vendor

lexmark

View all reports →

Affected Software

cs31x firmware, cs41x firmware, cs51x firmware, cx310 firmware, cx410 firmware, xc2130 firmware, cx510 firmware, xc2132 firmware, ms310 firmware, ms312 firmware, ms317 firmware, ms410 firmware, m1140 firmware, ms315 firmware, ms415 firmware, ms417 firmware, ms51x firmware, ms610dn firmware, ms617 firmware, m1145 firmware, m3150dn firmware, ms610de firmware, m3150 firmware, ms71x firmware, m5163dn firmware, ms810 firmware, ms811 firmware, ms812 firmware, ms817 firmware, ms818 firmware, ms810de firmware, m5155 firmware, m5163 firmware, ms812de firmware, m5170 firmware, ms91x firmware, mx31x firmware, xm1135 firmware, mx410 firmware, mx510 firmware, mx511 firmware, xm1140 firmware, xm1145 firmware, mx610 firmware, mx611 firmware, xm3150 firmware, mx71x firmware, mx81x firmware, xm51xx firmware, xm71xx firmware, mx91x firmware, xm91x firmware, mx6500e firmware, c746 firmware, c748 firmware, cs748 firmware, c792 firmware, cs796 firmware, c925 firmware, c950 firmware, x548 firmware, xs548 firmware, x74x firmware, xs748 firmware, x792 firmware, xs79x firmware, x925 firmware, xs925 firmware, x95x firmware, xs95x firmware, 6500e firmware, c734 firmware, c736 firmware, e46x firmware, t65x firmware, x46x firmware, x65x firmware, x73x firmware, w850 firmware, x86x firmware

Vulnerable Versions:

Timeline

Official Publish: March 6th, 2020

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.