Critical severity · published Jun 28, 2019
CVE-2018-15519
Various Lexmark devices have a Buffer Overflow (issue 1 of 2)
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
Various Lexmark devices have a Buffer Overflow (issue 1 of 2).
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
6F
6500 Firmware · Lexmark
through lhs60.jr.p671 · source: NVD
CF
Cx310 Firmware · Lexmark
through lw70.gm2.p204 · source: NVD
CF
Cx410 Firmware · Lexmark
through lw70.gm4.p204 · source: NVD
CF
Cx510 Firmware · Lexmark
through lw70.gm7.p204 · source: NVD
MF
Mx31x Firmware · Lexmark
through lw70.sb2.p204 · source: NVD
MF
Mx41x Firmware · Lexmark
through lw70.sb4.p204 · source: NVD
MF
Mx51x Firmware · Lexmark
through lw70.sb4.p204 · source: NVD
MF
Mx61x Firmware · Lexmark
through lw70.sb7.p204 · source: NVD
MF
Mx6500 Firmware · Lexmark
through lw70.jd.p204 · source: NVD
MF
Mx71x Firmware · Lexmark
through lw70.tu.p204 · source: NVD
MF
Mx81x Firmware · Lexmark
through lw70.tu.p204 · source: NVD
MF
Mx91x Firmware · Lexmark
through lw70.mg.p204 · source: NVD