Details of VAR-201908-0065

ID

VAR-201908-0065

CVE

CVE-2019-9932

TITLE

plural Lexmark Product buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2019-008726

DESCRIPTION

Various Lexmark products have a Buffer Overflow (issue 2 of 3). plural Lexmark The product contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Lexmark CS31x and others are all printers from Lexmark. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. The following products and versions are affected: Lexmark CS31x with firmware LW71.VYL.P230 and earlier; CS41x with firmware LW71.VY2.P230 and earlier; CS51x with firmware LW71.VY4.P230 and earlier; GM2.P230 and previous versions of CX310, etc

Trust: 1.71

sources: NVD: CVE-2019-9932 // JVNDB: JVNDB-2019-008726 // VULHUB: VHN-161367

AFFECTED PRODUCTS

vendor:	lexmark	model:	mx71x	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	m5163	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	x95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	ms317	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	mx511	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	xm71xx	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	ms610dn	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	mx611	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	c748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	x46x	scope:	lte	version:	lr.bs.p815	Trust: 1.0
vendor:	lexmark	model:	mx6500e	scope:	lte	version:	lw71.jd.p230	Trust: 1.0
vendor:	lexmark	model:	ms310	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	ms818	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	m1140	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c950	scope:	lte	version:	lhs60.tp.p705	Trust: 1.0
vendor:	lexmark	model:	c734	scope:	lte	version:	lr.sk.p815	Trust: 1.0
vendor:	lexmark	model:	ms71x	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	mx410	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	x792	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	6500e	scope:	lte	version:	lhs60.jr.p705	Trust: 1.0
vendor:	lexmark	model:	mx31x	scope:	lte	version:	lw71.sb2.p230	Trust: 1.0
vendor:	lexmark	model:	ms312	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c746	scope:	lte	version:	lhs60.cm2.p705	Trust: 1.0
vendor:	lexmark	model:	xs95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	xm51xx	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	mx610	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	x73x	scope:	lte	version:	lr.fl.p815	Trust: 1.0
vendor:	lexmark	model:	x74x	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	xs548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	xm91x	scope:	lte	version:	lw71.mg.p230	Trust: 1.0
vendor:	lexmark	model:	xm1135	scope:	lte	version:	lw71.sb2.p230	Trust: 1.0
vendor:	lexmark	model:	ms812	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	e46x	scope:	lte	version:	lr.lbh.p815	Trust: 1.0
vendor:	lexmark	model:	t65x	scope:	lte	version:	lr.jp.p815	Trust: 1.0
vendor:	lexmark	model:	cx310	scope:	lte	version:	lw71.gm2.p230	Trust: 1.0
vendor:	lexmark	model:	mx81x	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	ms812de	scope:	lte	version:	lw71.dn7.p230	Trust: 1.0
vendor:	lexmark	model:	ms410	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c925	scope:	lte	version:	lhs60.hv.p705	Trust: 1.0
vendor:	lexmark	model:	cs748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	xs925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	c736	scope:	lte	version:	lr.ske.p815	Trust: 1.0
vendor:	lexmark	model:	ms415	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	ms51x	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	m5163dn	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	x86x	scope:	lte	version:	lp.sp.p815	Trust: 1.0
vendor:	lexmark	model:	cs41x	scope:	lte	version:	lw71.vy2.p230	Trust: 1.0
vendor:	lexmark	model:	ms315	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	mx91x	scope:	lte	version:	lw71.mg.p230	Trust: 1.0
vendor:	lexmark	model:	xm3150	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	ms417	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	mx510	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	c792	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	x65x	scope:	lte	version:	lr.mn.p815	Trust: 1.0
vendor:	lexmark	model:	ms810	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	m3150dn	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	ms811	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	ms617	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	m5155	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	w850	scope:	lte	version:	lp.jb.p815	Trust: 1.0
vendor:	lexmark	model:	ms91x	scope:	lte	version:	lw71.sa.p230	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	lte	version:	lw71.vyl.p230	Trust: 1.0
vendor:	lexmark	model:	x548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	ms810de	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	xs748	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	m1145	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	ms817	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	xs79x	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	x925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	cs796	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	m5170	scope:	lte	version:	lw71.dn7.p230	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cs41x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms1140	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms312	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms315	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms317	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms410	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms415	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2019-008726 // NVD: CVE-2019-9932

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-9932
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2019-9932
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201908-2167
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-161367
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2019-9932
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-161367
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-9932
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-161367 // JVNDB: JVNDB-2019-008726 // CNNVD: CNNVD-201908-2167 // NVD: CVE-2019-9932

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-161367 // JVNDB: JVNDB-2019-008726 // NVD: CVE-2019-9932

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201908-2167

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201908-2167

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-008726

PATCH

title:	TE920	url:	http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US	Trust: 0.8
title:	Multiple Lexmark Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97651	Trust: 0.6

sources: JVNDB: JVNDB-2019-008726 // CNNVD: CNNVD-201908-2167

EXTERNAL IDS

db:	NVD	id:	CVE-2019-9932	Trust: 2.5
db:	JVNDB	id:	JVNDB-2019-008726	Trust: 0.8
db:	CNNVD	id:	CNNVD-201908-2167	Trust: 0.7
db:	VULHUB	id:	VHN-161367	Trust: 0.1

sources: VULHUB: VHN-161367 // JVNDB: JVNDB-2019-008726 // CNNVD: CNNVD-201908-2167 // NVD: CVE-2019-9932

REFERENCES

url:	http://support.lexmark.com/index?page=content&id=te920&locale=en&userlocale=en_us	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2019-9932	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9932	Trust: 0.8
url:	http://support.lexmark.com/index?page=content&id=te920&locale=en&userlocale=en_us	Trust: 0.1

sources: VULHUB: VHN-161367 // JVNDB: JVNDB-2019-008726 // CNNVD: CNNVD-201908-2167 // NVD: CVE-2019-9932

SOURCES

db:	VULHUB	id:	VHN-161367
db:	JVNDB	id:	JVNDB-2019-008726
db:	CNNVD	id:	CNNVD-201908-2167
db:	NVD	id:	CVE-2019-9932

LAST UPDATE DATE

2024-11-23T23:08:18.107000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-161367	date:	2019-09-03T00:00:00
db:	JVNDB	id:	JVNDB-2019-008726	date:	2019-09-05T00:00:00
db:	CNNVD	id:	CNNVD-201908-2167	date:	2019-09-04T00:00:00
db:	NVD	id:	CVE-2019-9932	date:	2024-11-21T04:52:37.033

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-161367	date:	2019-08-28T00:00:00
db:	JVNDB	id:	JVNDB-2019-008726	date:	2019-09-05T00:00:00
db:	CNNVD	id:	CNNVD-201908-2167	date:	2019-08-28T00:00:00
db:	NVD	id:	CVE-2019-9932	date:	2019-08-28T22:15:12.267