Details of VAR-201908-0063

ID

VAR-201908-0063

CVE

CVE-2019-9930

TITLE

plural Lexmark Product integer overflow vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2019-008488

DESCRIPTION

Various Lexmark products have an Integer Overflow. plural Lexmark The product contains an integer overflow vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state

Trust: 1.71

sources: NVD: CVE-2019-9930 // JVNDB: JVNDB-2019-008488 // VULHUB: VHN-161365

AFFECTED PRODUCTS

vendor:	lexmark	model:	mx71x	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	m5163	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	x95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	ms317	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	mx511	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	xm71xx	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	ms610dn	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	mx611	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	c748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	x46x	scope:	lte	version:	lr.bs.p815	Trust: 1.0
vendor:	lexmark	model:	mx6500e	scope:	lte	version:	lw71.jd.p230	Trust: 1.0
vendor:	lexmark	model:	ms310	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	ms818	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	m1140	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c950	scope:	lte	version:	lhs60.tp.p705	Trust: 1.0
vendor:	lexmark	model:	c734	scope:	lte	version:	lr.sk.p815	Trust: 1.0
vendor:	lexmark	model:	ms71x	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	mx410	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	x792	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	6500e	scope:	lte	version:	lhs60.jr.p705	Trust: 1.0
vendor:	lexmark	model:	mx31x	scope:	lte	version:	lw71.sb2.p230	Trust: 1.0
vendor:	lexmark	model:	ms312	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c746	scope:	lte	version:	lhs60.cm2.p705	Trust: 1.0
vendor:	lexmark	model:	xs95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	xm51xx	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	mx610	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	x73x	scope:	lte	version:	lr.fl.p815	Trust: 1.0
vendor:	lexmark	model:	x74x	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	xs548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	xm91x	scope:	lte	version:	lw71.mg.p230	Trust: 1.0
vendor:	lexmark	model:	xm1135	scope:	lte	version:	lw71.sb2.p230	Trust: 1.0
vendor:	lexmark	model:	ms812	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	e46x	scope:	lte	version:	lr.lbh.p815	Trust: 1.0
vendor:	lexmark	model:	t65x	scope:	lte	version:	lr.jp.p815	Trust: 1.0
vendor:	lexmark	model:	cx310	scope:	lte	version:	lw71.gm2.p230	Trust: 1.0
vendor:	lexmark	model:	mx81x	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	ms812de	scope:	lte	version:	lw71.dn7.p230	Trust: 1.0
vendor:	lexmark	model:	ms410	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c925	scope:	lte	version:	lhs60.hv.p705	Trust: 1.0
vendor:	lexmark	model:	cs748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	xs925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	c736	scope:	lte	version:	lr.ske.p815	Trust: 1.0
vendor:	lexmark	model:	ms415	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	ms51x	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	m5163dn	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	x86x	scope:	lte	version:	lp.sp.p815	Trust: 1.0
vendor:	lexmark	model:	cs41x	scope:	lte	version:	lw71.vy2.p230	Trust: 1.0
vendor:	lexmark	model:	ms315	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	mx91x	scope:	lte	version:	lw71.mg.p230	Trust: 1.0
vendor:	lexmark	model:	xm3150	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	ms417	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	mx510	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	c792	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	x65x	scope:	lte	version:	lr.mn.p815	Trust: 1.0
vendor:	lexmark	model:	ms810	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	m3150dn	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	ms811	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	ms617	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	m5155	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	w850	scope:	lte	version:	lp.jb.p815	Trust: 1.0
vendor:	lexmark	model:	ms91x	scope:	lte	version:	lw71.sa.p230	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	lte	version:	lw71.vyl.p230	Trust: 1.0
vendor:	lexmark	model:	x548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	ms810de	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	xs748	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	m1145	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	ms817	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	xs79x	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	x925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	cs796	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	m5170	scope:	lte	version:	lw71.dn7.p230	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cs41x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms1140	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms312	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms315	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms317	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms410	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms415	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2019-008488 // NVD: CVE-2019-9930

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-9930
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2019-9930
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201908-2165
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-161365
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2019-9930
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-161365
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-9930
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-161365 // JVNDB: JVNDB-2019-008488 // CNNVD: CNNVD-201908-2165 // NVD: CVE-2019-9930

PROBLEMTYPE DATA

problemtype:

CWE-190

Trust: 1.9

sources: VULHUB: VHN-161365 // JVNDB: JVNDB-2019-008488 // NVD: CVE-2019-9930

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201908-2165

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-201908-2165

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-008488

PATCH

title:	TE920	url:	http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US	Trust: 0.8
title:	Multiple Lexmark Product input verification error vulnerability fixes	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97649	Trust: 0.6

sources: JVNDB: JVNDB-2019-008488 // CNNVD: CNNVD-201908-2165

EXTERNAL IDS

db:	NVD	id:	CVE-2019-9930	Trust: 2.5
db:	JVNDB	id:	JVNDB-2019-008488	Trust: 0.8
db:	CNNVD	id:	CNNVD-201908-2165	Trust: 0.6
db:	VULHUB	id:	VHN-161365	Trust: 0.1

sources: VULHUB: VHN-161365 // JVNDB: JVNDB-2019-008488 // CNNVD: CNNVD-201908-2165 // NVD: CVE-2019-9930

REFERENCES

url:	http://support.lexmark.com/index?page=content&id=te920&locale=en&userlocale=en_us	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2019-9930	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9930	Trust: 0.8
url:	http://support.lexmark.com/index?page=content&id=te920&locale=en&userlocale=en_us	Trust: 0.1

sources: VULHUB: VHN-161365 // JVNDB: JVNDB-2019-008488 // CNNVD: CNNVD-201908-2165 // NVD: CVE-2019-9930

SOURCES

db:	VULHUB	id:	VHN-161365
db:	JVNDB	id:	JVNDB-2019-008488
db:	CNNVD	id:	CNNVD-201908-2165
db:	NVD	id:	CVE-2019-9930

LAST UPDATE DATE

2024-11-23T22:44:56.179000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-161365	date:	2019-08-29T00:00:00
db:	JVNDB	id:	JVNDB-2019-008488	date:	2019-09-02T00:00:00
db:	CNNVD	id:	CNNVD-201908-2165	date:	2019-08-30T00:00:00
db:	NVD	id:	CVE-2019-9930	date:	2024-11-21T04:52:36.160

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-161365	date:	2019-08-28T00:00:00
db:	JVNDB	id:	JVNDB-2019-008488	date:	2019-09-02T00:00:00
db:	CNNVD	id:	CNNVD-201908-2165	date:	2019-08-28T00:00:00
db:	NVD	id:	CVE-2019-9930	date:	2019-08-28T22:15:12.107