Details of VAR-201908-0066

ID

VAR-201908-0066

CVE

CVE-2019-9933

TITLE

plural Lexmark Buffer error vulnerability in product

Trust: 0.8

sources: JVNDB: JVNDB-2019-008725

DESCRIPTION

Various Lexmark products have a Buffer Overflow (issue 3 of 3). plural Lexmark The product contains a buffer error vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. Lexmark CS31x and others are all printers from Lexmark. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. The following products and versions are affected: Lexmark CS31x with firmware LW71.VYL.P230 and earlier; CS41x with firmware LW71.VY2.P230 and earlier; CS51x with firmware LW71.VY4.P230 and earlier; GM2.P230 and previous versions of CX310, etc

Trust: 1.71

sources: NVD: CVE-2019-9933 // JVNDB: JVNDB-2019-008725 // VULHUB: VHN-161368

AFFECTED PRODUCTS

vendor:	lexmark	model:	mx71x	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	m5163	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	x95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	ms317	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	mx511	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	xm71xx	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	ms610dn	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	mx611	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	c748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	x46x	scope:	lte	version:	lr.bs.p815	Trust: 1.0
vendor:	lexmark	model:	mx6500e	scope:	lte	version:	lw71.jd.p230	Trust: 1.0
vendor:	lexmark	model:	ms310	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	ms818	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	m1140	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c950	scope:	lte	version:	lhs60.tp.p705	Trust: 1.0
vendor:	lexmark	model:	c734	scope:	lte	version:	lr.sk.p815	Trust: 1.0
vendor:	lexmark	model:	ms71x	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	mx410	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	x792	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	6500e	scope:	lte	version:	lhs60.jr.p705	Trust: 1.0
vendor:	lexmark	model:	mx31x	scope:	lte	version:	lw71.sb2.p230	Trust: 1.0
vendor:	lexmark	model:	ms312	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c746	scope:	lte	version:	lhs60.cm2.p705	Trust: 1.0
vendor:	lexmark	model:	xs95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	xm51xx	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	mx610	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	x73x	scope:	lte	version:	lr.fl.p815	Trust: 1.0
vendor:	lexmark	model:	x74x	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	xs548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	xm91x	scope:	lte	version:	lw71.mg.p230	Trust: 1.0
vendor:	lexmark	model:	xm1135	scope:	lte	version:	lw71.sb2.p230	Trust: 1.0
vendor:	lexmark	model:	ms812	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	e46x	scope:	lte	version:	lr.lbh.p815	Trust: 1.0
vendor:	lexmark	model:	t65x	scope:	lte	version:	lr.jp.p815	Trust: 1.0
vendor:	lexmark	model:	cx310	scope:	lte	version:	lw71.gm2.p230	Trust: 1.0
vendor:	lexmark	model:	mx81x	scope:	lte	version:	lw71.tu.p230	Trust: 1.0
vendor:	lexmark	model:	ms812de	scope:	lte	version:	lw71.dn7.p230	Trust: 1.0
vendor:	lexmark	model:	ms410	scope:	lte	version:	lw71.prl.p230	Trust: 1.0
vendor:	lexmark	model:	c925	scope:	lte	version:	lhs60.hv.p705	Trust: 1.0
vendor:	lexmark	model:	cs748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	xs925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	c736	scope:	lte	version:	lr.ske.p815	Trust: 1.0
vendor:	lexmark	model:	ms415	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	ms51x	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	m5163dn	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	x86x	scope:	lte	version:	lp.sp.p815	Trust: 1.0
vendor:	lexmark	model:	cs41x	scope:	lte	version:	lw71.vy2.p230	Trust: 1.0
vendor:	lexmark	model:	ms315	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	mx91x	scope:	lte	version:	lw71.mg.p230	Trust: 1.0
vendor:	lexmark	model:	xm3150	scope:	lte	version:	lw71.sb7.p230	Trust: 1.0
vendor:	lexmark	model:	ms417	scope:	lte	version:	lw71.tl2.p230	Trust: 1.0
vendor:	lexmark	model:	mx510	scope:	lte	version:	lw71.sb4.p230	Trust: 1.0
vendor:	lexmark	model:	c792	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	x65x	scope:	lte	version:	lr.mn.p815	Trust: 1.0
vendor:	lexmark	model:	ms810	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	m3150dn	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	ms811	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	ms617	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	m5155	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	w850	scope:	lte	version:	lp.jb.p815	Trust: 1.0
vendor:	lexmark	model:	ms91x	scope:	lte	version:	lw71.sa.p230	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	lte	version:	lw71.vyl.p230	Trust: 1.0
vendor:	lexmark	model:	x548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	ms810de	scope:	lte	version:	lw71.dn4.p230	Trust: 1.0
vendor:	lexmark	model:	xs748	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	m1145	scope:	lte	version:	lw71.pr2.p230	Trust: 1.0
vendor:	lexmark	model:	ms817	scope:	lte	version:	lw71.dn2.p230	Trust: 1.0
vendor:	lexmark	model:	xs79x	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	x925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	cs796	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	m5170	scope:	lte	version:	lw71.dn7.p230	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cs41x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms1140	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms312	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms315	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms317	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms410	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms415	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2019-008725 // NVD: CVE-2019-9933

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-9933
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2019-9933
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201908-2168
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-161368
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2019-9933
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-161368
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-9933
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-161368 // JVNDB: JVNDB-2019-008725 // CNNVD: CNNVD-201908-2168 // NVD: CVE-2019-9933

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-161368 // JVNDB: JVNDB-2019-008725 // NVD: CVE-2019-9933

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201908-2168

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201908-2168

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-008725

PATCH

title:	TE920	url:	http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US	Trust: 0.8
title:	Multiple Lexmark Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97652	Trust: 0.6

sources: JVNDB: JVNDB-2019-008725 // CNNVD: CNNVD-201908-2168

EXTERNAL IDS

db:	NVD	id:	CVE-2019-9933	Trust: 2.5
db:	JVNDB	id:	JVNDB-2019-008725	Trust: 0.8
db:	CNNVD	id:	CNNVD-201908-2168	Trust: 0.7
db:	VULHUB	id:	VHN-161368	Trust: 0.1

sources: VULHUB: VHN-161368 // JVNDB: JVNDB-2019-008725 // CNNVD: CNNVD-201908-2168 // NVD: CVE-2019-9933

REFERENCES

url:	http://support.lexmark.com/index?page=content&id=te920&locale=en&userlocale=en_us	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2019-9933	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9933	Trust: 0.8
url:	http://support.lexmark.com/index?page=content&id=te920&locale=en&userlocale=en_us	Trust: 0.1

sources: VULHUB: VHN-161368 // JVNDB: JVNDB-2019-008725 // CNNVD: CNNVD-201908-2168 // NVD: CVE-2019-9933

SOURCES

db:	VULHUB	id:	VHN-161368
db:	JVNDB	id:	JVNDB-2019-008725
db:	CNNVD	id:	CNNVD-201908-2168
db:	NVD	id:	CVE-2019-9933

LAST UPDATE DATE

2024-11-23T22:58:37.426000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-161368	date:	2019-09-03T00:00:00
db:	JVNDB	id:	JVNDB-2019-008725	date:	2019-09-05T00:00:00
db:	CNNVD	id:	CNNVD-201908-2168	date:	2019-09-04T00:00:00
db:	NVD	id:	CVE-2019-9933	date:	2024-11-21T04:52:37.230

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-161368	date:	2019-08-28T00:00:00
db:	JVNDB	id:	JVNDB-2019-008725	date:	2019-09-05T00:00:00
db:	CNNVD	id:	CNNVD-201908-2168	date:	2019-08-28T00:00:00
db:	NVD	id:	CVE-2019-9933	date:	2019-08-28T22:15:12.343