Details of VAR-201906-0822

ID

VAR-201906-0822

CVE

CVE-2018-15520

TITLE

plural Lexmark Device buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-015803

DESCRIPTION

Various Lexmark devices have a Buffer Overflow (issue 2 of 2). plural Lexmark The device contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Lexmark CX82x and so on are a multi-function printer of American Lexmark (Lexmark). A buffer error vulnerability exists in several Lexmark products. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. The following products and versions are affected: Lexmark CX82x CXTPP.052.024 and earlier, versions 052.200 to 052.204; CX860 CXTPP.052.024 and earlier, versions 052.200 to 052.204; XC6152 CXTPP.052.024 and earlier, versions 052.200 to 052.204 XC8155 CXTPP.052.024 and earlier, version 052.200 to 052.204; XC8160 CXTPP.052.024 and earlier, version 052.200 to 052.204; CX72x CXTAT.052.024 and earlier, version 052.200 to 052.204 and earlier; XC41x0 CX Version 052.200 to Version 052.204; CX92x, etc

Trust: 1.8

sources: NVD: CVE-2018-15520 // JVNDB: JVNDB-2018-015803 // VULHUB: VHN-125788 // VULMON: CVE-2018-15520

AFFECTED PRODUCTS

vendor:	lexmark	model:	cx62x	scope:	lte	version:	cxtzj.052.024	Trust: 1.0
vendor:	lexmark	model:	mc2640	scope:	lte	version:	cxtzj.052.204	Trust: 1.0
vendor:	lexmark	model:	mx52x	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	mx82x	scope:	lte	version:	mxtgw.052.024	Trust: 1.0
vendor:	lexmark	model:	xc4240	scope:	gte	version:	cxtzj.052.200	Trust: 1.0
vendor:	lexmark	model:	mb2338	scope:	lte	version:	mxngm.052.024	Trust: 1.0
vendor:	lexmark	model:	mb2770	scope:	gte	version:	mxtgw.052.200	Trust: 1.0
vendor:	lexmark	model:	mx321	scope:	lte	version:	mxngm.052.204	Trust: 1.0
vendor:	lexmark	model:	mb2442	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	xc8155	scope:	lte	version:	cxtpp.052.024	Trust: 1.0
vendor:	lexmark	model:	mx52x	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	xc6152	scope:	lte	version:	cxtpp.052.024	Trust: 1.0
vendor:	lexmark	model:	xm7355	scope:	lte	version:	mxtgw.052.204	Trust: 1.0
vendor:	lexmark	model:	cx522	scope:	gte	version:	cxtzj.052.200	Trust: 1.0
vendor:	lexmark	model:	mb2650	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	cx860	scope:	gte	version:	cxtpp.052.200	Trust: 1.0
vendor:	lexmark	model:	mb2770	scope:	lte	version:	mxtgw.052.024	Trust: 1.0
vendor:	lexmark	model:	mx72x	scope:	lte	version:	mxtgw.052.024	Trust: 1.0
vendor:	lexmark	model:	mx82x	scope:	lte	version:	mxtgw.052.204	Trust: 1.0
vendor:	lexmark	model:	mb2338	scope:	gte	version:	mxngm.052.200	Trust: 1.0
vendor:	lexmark	model:	cx92x	scope:	gte	version:	cxtmh.052.200	Trust: 1.0
vendor:	lexmark	model:	xc92x5	scope:	gte	version:	cxtmh.052.200	Trust: 1.0
vendor:	lexmark	model:	xm124x	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	xm7370	scope:	gte	version:	mxtgw.052.200	Trust: 1.0
vendor:	lexmark	model:	cx421	scope:	lte	version:	cxnzj.052.024	Trust: 1.0
vendor:	lexmark	model:	xc4240	scope:	lte	version:	cxtzj.052.024	Trust: 1.0
vendor:	lexmark	model:	mx622	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	mb2650	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	mc2425	scope:	lte	version:	cxnzj.052.024	Trust: 1.0
vendor:	lexmark	model:	xm124x	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	xm3250	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	cx72x	scope:	lte	version:	cxtat.052.204	Trust: 1.0
vendor:	lexmark	model:	xc8160	scope:	gte	version:	cxtpp.052.200	Trust: 1.0
vendor:	lexmark	model:	cx72x	scope:	lte	version:	cxtat.052.024	Trust: 1.0
vendor:	lexmark	model:	mb2546	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	mx72x	scope:	lte	version:	mxtgw.052.204	Trust: 1.0
vendor:	lexmark	model:	mb2770	scope:	lte	version:	mxtgw.052.204	Trust: 1.0
vendor:	lexmark	model:	cx522	scope:	lte	version:	cxtzj.052.024	Trust: 1.0
vendor:	lexmark	model:	cx522	scope:	lte	version:	cxtzj.052.204	Trust: 1.0
vendor:	lexmark	model:	mx622	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	cx860	scope:	lte	version:	cxtpp.052.204	Trust: 1.0
vendor:	lexmark	model:	mx42x	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	cx82x	scope:	gte	version:	cxtpp.052.200	Trust: 1.0
vendor:	lexmark	model:	mx52x	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	xc8155	scope:	gte	version:	cxtpp.052.200	Trust: 1.0
vendor:	lexmark	model:	mc2325	scope:	lte	version:	cxnzj.052.024	Trust: 1.0
vendor:	lexmark	model:	mx42x	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	cx82x	scope:	lte	version:	cxtpp.052.024	Trust: 1.0
vendor:	lexmark	model:	xc8160	scope:	lte	version:	cxtpp.052.204	Trust: 1.0
vendor:	lexmark	model:	cx62x	scope:	lte	version:	cxtzj.052.204	Trust: 1.0
vendor:	lexmark	model:	mc2535	scope:	lte	version:	cxtzj.052.204	Trust: 1.0
vendor:	lexmark	model:	mx72x	scope:	gte	version:	mxtgw.052.200	Trust: 1.0
vendor:	lexmark	model:	xc2235	scope:	lte	version:	cxtzj.052.024	Trust: 1.0
vendor:	lexmark	model:	xc6152	scope:	gte	version:	cxtpp.052.200	Trust: 1.0
vendor:	lexmark	model:	xc2235	scope:	lte	version:	cxtzj.052.204	Trust: 1.0
vendor:	lexmark	model:	mc2640	scope:	lte	version:	cxtzj.052.024	Trust: 1.0
vendor:	lexmark	model:	xc92x5	scope:	lte	version:	cxtmh.052.024	Trust: 1.0
vendor:	lexmark	model:	mb2442	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	xm124x	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	mb2546	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	cx82x	scope:	lte	version:	cxtpp.052.204	Trust: 1.0
vendor:	lexmark	model:	cx421	scope:	gte	version:	cxnzj.052.200	Trust: 1.0
vendor:	lexmark	model:	xc92x5	scope:	lte	version:	cxtmh.052.204	Trust: 1.0
vendor:	lexmark	model:	cx92x	scope:	lte	version:	cxtmh.052.024	Trust: 1.0
vendor:	lexmark	model:	mx321	scope:	lte	version:	mxngm.052.024	Trust: 1.0
vendor:	lexmark	model:	xm3250	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	xc4240	scope:	lte	version:	cxtzj.052.204	Trust: 1.0
vendor:	lexmark	model:	mb2546	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	cx860	scope:	lte	version:	cxtpp.052.024	Trust: 1.0
vendor:	lexmark	model:	xc41x0	scope:	lte	version:	cxtat.052.024	Trust: 1.0
vendor:	lexmark	model:	xc41x0	scope:	lte	version:	cxtat.052.204	Trust: 1.0
vendor:	lexmark	model:	cx92x	scope:	lte	version:	cxtmh.052.204	Trust: 1.0
vendor:	lexmark	model:	xc41x0	scope:	gte	version:	cxtat.052.200	Trust: 1.0
vendor:	lexmark	model:	xc8155	scope:	lte	version:	cxtpp.052.204	Trust: 1.0
vendor:	lexmark	model:	mx321	scope:	gte	version:	mxngm.052.200	Trust: 1.0
vendor:	lexmark	model:	xc6152	scope:	lte	version:	cxtpp.052.204	Trust: 1.0
vendor:	lexmark	model:	cx72x	scope:	gte	version:	cxtat.052.200	Trust: 1.0
vendor:	lexmark	model:	mb2650	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	xm7355	scope:	gte	version:	mxtgw.052.200	Trust: 1.0
vendor:	lexmark	model:	cx421	scope:	lte	version:	cxnzj.052.204	Trust: 1.0
vendor:	lexmark	model:	xm3250	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	mc2425	scope:	gte	version:	cxnzj.052.200	Trust: 1.0
vendor:	lexmark	model:	xm5370	scope:	gte	version:	mxtgw.052.200	Trust: 1.0
vendor:	lexmark	model:	xc2235	scope:	gte	version:	cxtzj.052.200	Trust: 1.0
vendor:	lexmark	model:	mc2640	scope:	gte	version:	cxtzj.052.200	Trust: 1.0
vendor:	lexmark	model:	mx82x	scope:	gte	version:	mxtgw.052.200	Trust: 1.0
vendor:	lexmark	model:	mc2425	scope:	lte	version:	cxnzj.052.204	Trust: 1.0
vendor:	lexmark	model:	mb2442	scope:	lte	version:	mxtgm.052.204	Trust: 1.0
vendor:	lexmark	model:	xm7370	scope:	lte	version:	mxtgw.052.024	Trust: 1.0
vendor:	lexmark	model:	mx622	scope:	lte	version:	mxtgm.052.024	Trust: 1.0
vendor:	lexmark	model:	xc8160	scope:	lte	version:	cxtpp.052.024	Trust: 1.0
vendor:	lexmark	model:	xm5370	scope:	lte	version:	mxtgw.052.024	Trust: 1.0
vendor:	lexmark	model:	cx62x	scope:	gte	version:	cxtzj.052.200	Trust: 1.0
vendor:	lexmark	model:	mc2535	scope:	gte	version:	cxtzj.052.200	Trust: 1.0
vendor:	lexmark	model:	mx42x	scope:	gte	version:	mxtgm.052.200	Trust: 1.0
vendor:	lexmark	model:	mc2325	scope:	gte	version:	cxnzj.052.200	Trust: 1.0
vendor:	lexmark	model:	mb2338	scope:	lte	version:	mxngm.052.204	Trust: 1.0
vendor:	lexmark	model:	xm7355	scope:	lte	version:	mxtgw.052.024	Trust: 1.0
vendor:	lexmark	model:	xm7370	scope:	lte	version:	mxtgw.052.204	Trust: 1.0
vendor:	lexmark	model:	mc2325	scope:	lte	version:	cxnzj.052.204	Trust: 1.0
vendor:	lexmark	model:	xm5370	scope:	lte	version:	mxtgw.052.204	Trust: 1.0
vendor:	lexmark	model:	mc2535	scope:	lte	version:	cxtzj.052.024	Trust: 1.0
vendor:	lexmark	model:	cx72	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx82	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx860	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx92	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	mx321	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xc41x0	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xc6152	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xc8155	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xc8160	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xc92x5	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2018-015803 // NVD: CVE-2018-15520

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-15520
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2018-15520
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201906-1100
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-125788
value:	HIGH
Trust: 0.1
VULMON:	CVE-2018-15520
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2018-15520
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-125788
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-15520
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-125788 // VULMON: CVE-2018-15520 // JVNDB: JVNDB-2018-015803 // CNNVD: CNNVD-201906-1100 // NVD: CVE-2018-15520

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-125788 // JVNDB: JVNDB-2018-015803 // NVD: CVE-2018-15520

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201906-1100

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201906-1100

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-015803

PATCH

title:	TE892	url:	http://support.lexmark.com/index?page=content&id=TE892&locale=en&userlocale=EN_US	Trust: 0.8
title:	Multiple Lexmark Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=94201	Trust: 0.6

sources: JVNDB: JVNDB-2018-015803 // CNNVD: CNNVD-201906-1100

EXTERNAL IDS

db:	NVD	id:	CVE-2018-15520	Trust: 2.6
db:	JVNDB	id:	JVNDB-2018-015803	Trust: 0.8
db:	CNNVD	id:	CNNVD-201906-1100	Trust: 0.7
db:	VULHUB	id:	VHN-125788	Trust: 0.1
db:	VULMON	id:	CVE-2018-15520	Trust: 0.1

sources: VULHUB: VHN-125788 // VULMON: CVE-2018-15520 // JVNDB: JVNDB-2018-015803 // CNNVD: CNNVD-201906-1100 // NVD: CVE-2018-15520

REFERENCES

url:	http://support.lexmark.com/index?page=content&id=te892	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2018-15520	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-15520	Trust: 0.8
url:	http://support.lexmark.com/index?page=content&id=te892	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/119.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULHUB: VHN-125788 // VULMON: CVE-2018-15520 // JVNDB: JVNDB-2018-015803 // CNNVD: CNNVD-201906-1100 // NVD: CVE-2018-15520

SOURCES

db:	VULHUB	id:	VHN-125788
db:	VULMON	id:	CVE-2018-15520
db:	JVNDB	id:	JVNDB-2018-015803
db:	CNNVD	id:	CNNVD-201906-1100
db:	NVD	id:	CVE-2018-15520

LAST UPDATE DATE

2024-11-23T22:41:29.168000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-125788	date:	2019-07-05T00:00:00
db:	VULMON	id:	CVE-2018-15520	date:	2019-07-05T00:00:00
db:	JVNDB	id:	JVNDB-2018-015803	date:	2019-07-08T00:00:00
db:	CNNVD	id:	CNNVD-201906-1100	date:	2019-07-08T00:00:00
db:	NVD	id:	CVE-2018-15520	date:	2024-11-21T03:51:00.073

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-125788	date:	2019-06-28T00:00:00
db:	VULMON	id:	CVE-2018-15520	date:	2019-06-28T00:00:00
db:	JVNDB	id:	JVNDB-2018-015803	date:	2019-07-08T00:00:00
db:	CNNVD	id:	CNNVD-201906-1100	date:	2019-06-28T00:00:00
db:	NVD	id:	CVE-2018-15520	date:	2019-06-28T16:15:09.463