Details of VAR-201902-0119

ID

VAR-201902-0119

CVE

CVE-2019-6489

TITLE

plural Lexmark Vulnerability related to input validation on devices

Trust: 0.8

sources: JVNDB: JVNDB-2019-001726

DESCRIPTION

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts. plural Lexmark The device contains an input validation vulnerability.Information may be tampered with. A security vulnerability exists in several Lexmark products. A remote attacker could exploit this vulnerability to perform delete operations. The following products and versions are affected: Lexmark CX prior to 2019-02-11; MX prior to 2019-02-11; X prior to 2019-02-11; XC prior to 2019-02-11; XM prior to 2019-02-11 Previous version; XS version before 2019-02-11; 6500e version before 2019-02-11

Trust: 1.71

sources: NVD: CVE-2019-6489 // JVNDB: JVNDB-2019-001726 // VULHUB: VHN-157924

AFFECTED PRODUCTS

vendor:	lexmark	model:	cx410	scope:	lte	version:	lw71.gm4.p216	Trust: 1.0
vendor:	lexmark	model:	xm3150	scope:	lte	version:	lw71.sb7.p216	Trust: 1.0
vendor:	lexmark	model:	mx91x	scope:	lte	version:	lw71.mg.p216	Trust: 1.0
vendor:	lexmark	model:	xm7170	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	mx511	scope:	lte	version:	lw71.sb4.p216	Trust: 1.0
vendor:	lexmark	model:	x792	scope:	lte	version:	lhs60.mr.p682	Trust: 1.0
vendor:	lexmark	model:	cx310	scope:	lte	version:	lw71.gm2.p216	Trust: 1.0
vendor:	lexmark	model:	mx410	scope:	lte	version:	lw71.sb4.p216	Trust: 1.0
vendor:	lexmark	model:	mx81x	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	xm7155x	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	xs748	scope:	lte	version:	lhs60.ny.p682	Trust: 1.0
vendor:	lexmark	model:	x95x	scope:	lte	version:	lhs60.tq.p682	Trust: 1.0
vendor:	lexmark	model:	x46x	scope:	lte	version:	lr.bs.p809	Trust: 1.0
vendor:	lexmark	model:	x86x	scope:	lte	version:	lp.sp.p809	Trust: 1.0
vendor:	lexmark	model:	x65x	scope:	lte	version:	lr.mn.p809	Trust: 1.0
vendor:	lexmark	model:	x548	scope:	lte	version:	lhs60.vk.p682	Trust: 1.0
vendor:	lexmark	model:	mx611	scope:	lte	version:	lw71.sb7.p216	Trust: 1.0
vendor:	lexmark	model:	xm7163x	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	x73x	scope:	lte	version:	lr.fl.p809	Trust: 1.0
vendor:	lexmark	model:	xm5170	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	xs925	scope:	lte	version:	lhs60.hk.p682	Trust: 1.0
vendor:	lexmark	model:	xm7155	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	xc2132	scope:	lte	version:	lw71.gm7.p216	Trust: 1.0
vendor:	lexmark	model:	xs95x	scope:	lte	version:	lhs60.tq.p682	Trust: 1.0
vendor:	lexmark	model:	xm7163	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	mx31x	scope:	lte	version:	lw71.sb2.p216	Trust: 1.0
vendor:	lexmark	model:	xm91x	scope:	lte	version:	lw71.mg.p216	Trust: 1.0
vendor:	lexmark	model:	cx510	scope:	lte	version:	lw71.gm7.p216	Trust: 1.0
vendor:	lexmark	model:	xm5163	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	x74x	scope:	lte	version:	lhs60.ny.p682	Trust: 1.0
vendor:	lexmark	model:	mx610	scope:	lte	version:	lw71.sb7.p216	Trust: 1.0
vendor:	lexmark	model:	xm7170x	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	6500e	scope:	lte	version:	lhs60.jr.p809	Trust: 1.0
vendor:	lexmark	model:	mx510	scope:	lte	version:	lw71.sb4.p216	Trust: 1.0
vendor:	lexmark	model:	mx71x	scope:	lte	version:	lw71.tu.p216	Trust: 1.0
vendor:	lexmark	model:	mx6500e	scope:	lte	version:	lw71.jd.p216	Trust: 1.0
vendor:	lexmark	model:	xm1145	scope:	lte	version:	lw71.sb4.p216	Trust: 1.0
vendor:	lexmark	model:	x925	scope:	lte	version:	lhs60.hk.p682	Trust: 1.0
vendor:	lexmark	model:	xs548	scope:	lte	version:	lhs60.vk.p682	Trust: 1.0
vendor:	lexmark	model:	xs79x	scope:	lte	version:	lhs60.mr.p682	Trust: 1.0
vendor:	lexmark	model:	cx310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx410	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm5163	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm5170	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm7155x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm7155	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm7163x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm7163	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm7170x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xm7170	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2019-001726 // NVD: CVE-2019-6489

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-6489
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2019-6489
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201902-325
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-157924
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2019-6489
severity:	MEDIUM
baseScore:	6.4
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-157924
severity:	MEDIUM
baseScore:	6.4
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-6489
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-157924 // JVNDB: JVNDB-2019-001726 // CNNVD: CNNVD-201902-325 // NVD: CVE-2019-6489

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-20	Trust: 0.9

sources: VULHUB: VHN-157924 // JVNDB: JVNDB-2019-001726 // NVD: CVE-2019-6489

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201902-325

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201902-325

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-001726

PATCH

title:	TE912	url:	http://support.lexmark.com/index?page=content&id=TE912	Trust: 0.8
title:	Multiple Lexmark Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=89143	Trust: 0.6

sources: JVNDB: JVNDB-2019-001726 // CNNVD: CNNVD-201902-325

EXTERNAL IDS

db:	NVD	id:	CVE-2019-6489	Trust: 2.5
db:	JVNDB	id:	JVNDB-2019-001726	Trust: 0.8
db:	CNNVD	id:	CNNVD-201902-325	Trust: 0.7
db:	VULHUB	id:	VHN-157924	Trust: 0.1

sources: VULHUB: VHN-157924 // JVNDB: JVNDB-2019-001726 // CNNVD: CNNVD-201902-325 // NVD: CVE-2019-6489

REFERENCES

url:	http://support.lexmark.com/index?page=content&id=te912	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2019-6489	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6489	Trust: 0.8
url:	http://support.lexmark.com/index?page=content&id=te912	Trust: 0.1

sources: VULHUB: VHN-157924 // JVNDB: JVNDB-2019-001726 // CNNVD: CNNVD-201902-325 // NVD: CVE-2019-6489

SOURCES

db:	VULHUB	id:	VHN-157924
db:	JVNDB	id:	JVNDB-2019-001726
db:	CNNVD	id:	CNNVD-201902-325
db:	NVD	id:	CVE-2019-6489

LAST UPDATE DATE

2024-11-23T22:06:20.667000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-157924	date:	2020-08-24T00:00:00
db:	JVNDB	id:	JVNDB-2019-001726	date:	2019-03-25T00:00:00
db:	CNNVD	id:	CNNVD-201902-325	date:	2020-08-25T00:00:00
db:	NVD	id:	CVE-2019-6489	date:	2024-11-21T04:46:32.527

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-157924	date:	2019-02-11T00:00:00
db:	JVNDB	id:	JVNDB-2019-001726	date:	2019-03-25T00:00:00
db:	CNNVD	id:	CNNVD-201902-325	date:	2019-02-11T00:00:00
db:	NVD	id:	CVE-2019-6489	date:	2019-02-11T21:29:00.333