Details of VAR-201908-1622

ID

VAR-201908-1622

CVE

CVE-2019-10059

TITLE

Lexmark Vulnerabilities related to security functions in devices

Trust: 0.8

sources: JVNDB: JVNDB-2019-008728

DESCRIPTION

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices. Lexmark The device contains vulnerabilities related to security functions.Information may be obtained. Lexmark CS31x and others are all printers from Lexmark. This vulnerability is due to the lack of security measures such as authentication, access control, and rights management in network systems or products. The following products and versions are affected: Lexmark CS31x using LW71.VYL.P233 and earlier; CS41x using LW71.VY2.P233 and earlier; CS51x using LW71.VY4.P233 and earlier; using LW71.GM2.P233 and earlier version of the CX310, etc

Trust: 1.71

sources: NVD: CVE-2019-10059 // JVNDB: JVNDB-2019-008728 // VULHUB: VHN-141229

AFFECTED PRODUCTS

vendor:	lexmark	model:	ms315	scope:	lte	version:	lw71.tl2.p233	Trust: 1.0
vendor:	lexmark	model:	x95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	ms417	scope:	lte	version:	lw71.tl2.p233	Trust: 1.0
vendor:	lexmark	model:	xm51xx	scope:	lte	version:	lw71.tu.p233	Trust: 1.0
vendor:	lexmark	model:	xm1135	scope:	lte	version:	lw71.sb2.p233	Trust: 1.0
vendor:	lexmark	model:	ms817	scope:	lte	version:	lw71.dn2.p233	Trust: 1.0
vendor:	lexmark	model:	xm91x	scope:	lte	version:	lw71.mg.p233	Trust: 1.0
vendor:	lexmark	model:	c748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	x46x	scope:	lte	version:	lr.bs.p815	Trust: 1.0
vendor:	lexmark	model:	m5155	scope:	lte	version:	lw71.dn4.p233	Trust: 1.0
vendor:	lexmark	model:	c950	scope:	lte	version:	lhs60.tp.p705	Trust: 1.0
vendor:	lexmark	model:	c734	scope:	lte	version:	lr.sk.p815	Trust: 1.0
vendor:	lexmark	model:	mx610	scope:	lte	version:	lw71.sb7.p233	Trust: 1.0
vendor:	lexmark	model:	m3150dn	scope:	lte	version:	lw71.pr2.p233	Trust: 1.0
vendor:	lexmark	model:	ms810de	scope:	lte	version:	lw71.dn4.p233	Trust: 1.0
vendor:	lexmark	model:	ms617	scope:	lte	version:	lw71.pr2.p233	Trust: 1.0
vendor:	lexmark	model:	m5170	scope:	lte	version:	lw71.dn7.p233	Trust: 1.0
vendor:	lexmark	model:	mx511	scope:	lte	version:	lw71.sb4.p233	Trust: 1.0
vendor:	lexmark	model:	mx81x	scope:	lte	version:	lw71.tu.p233	Trust: 1.0
vendor:	lexmark	model:	c746	scope:	lte	version:	lhs60.cm2.p705	Trust: 1.0
vendor:	lexmark	model:	x792	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	xs95x	scope:	lte	version:	lhs60.tq.p705	Trust: 1.0
vendor:	lexmark	model:	6500e	scope:	lte	version:	lhs60.jr.p705	Trust: 1.0
vendor:	lexmark	model:	x73x	scope:	lte	version:	lr.fl.p815	Trust: 1.0
vendor:	lexmark	model:	mx410	scope:	lte	version:	lw71.sb4.p233	Trust: 1.0
vendor:	lexmark	model:	ms818	scope:	lte	version:	lw71.dn2.p233	Trust: 1.0
vendor:	lexmark	model:	ms91x	scope:	lte	version:	lw71.sa.p233	Trust: 1.0
vendor:	lexmark	model:	m1145	scope:	lte	version:	lw71.pr2.p233	Trust: 1.0
vendor:	lexmark	model:	cs796	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	x74x	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	ms71x	scope:	lte	version:	lw71.dn2.p233	Trust: 1.0
vendor:	lexmark	model:	m5163	scope:	lte	version:	lw71.dn4.p233	Trust: 1.0
vendor:	lexmark	model:	mx91x	scope:	lte	version:	lw71.mg.p233	Trust: 1.0
vendor:	lexmark	model:	xs548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	e46x	scope:	lte	version:	lr.lbh.p815	Trust: 1.0
vendor:	lexmark	model:	t65x	scope:	lte	version:	lr.jp.p815	Trust: 1.0
vendor:	lexmark	model:	ms317	scope:	lte	version:	lw71.prl.p233	Trust: 1.0
vendor:	lexmark	model:	cs41x	scope:	lte	version:	lw71.vy2.p233	Trust: 1.0
vendor:	lexmark	model:	c925	scope:	lte	version:	lhs60.hv.p705	Trust: 1.0
vendor:	lexmark	model:	xs925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	c736	scope:	lte	version:	lr.ske.p815	Trust: 1.0
vendor:	lexmark	model:	cs748	scope:	lte	version:	lhs60.cm4.p705	Trust: 1.0
vendor:	lexmark	model:	ms610dn	scope:	lte	version:	lw71.pr2.p233	Trust: 1.0
vendor:	lexmark	model:	ms310	scope:	lte	version:	lw71.prl.p233	Trust: 1.0
vendor:	lexmark	model:	xm3150	scope:	lte	version:	lw71.sb7.p233	Trust: 1.0
vendor:	lexmark	model:	m1140	scope:	lte	version:	lw71.prl.p233	Trust: 1.0
vendor:	lexmark	model:	cx310	scope:	lte	version:	lw71.gm2.p233	Trust: 1.0
vendor:	lexmark	model:	ms812	scope:	lte	version:	lw71.dn2.p233	Trust: 1.0
vendor:	lexmark	model:	x86x	scope:	lte	version:	lp.sp.p815	Trust: 1.0
vendor:	lexmark	model:	ms812de	scope:	lte	version:	lw71.dn7.p233	Trust: 1.0
vendor:	lexmark	model:	c792	scope:	lte	version:	lhs60.hc.p705	Trust: 1.0
vendor:	lexmark	model:	ms312	scope:	lte	version:	lw71.prl.p233	Trust: 1.0
vendor:	lexmark	model:	m5163dn	scope:	lte	version:	lw71.dn2.p233	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	lte	version:	lw71.vyl.p233	Trust: 1.0
vendor:	lexmark	model:	x65x	scope:	lte	version:	lr.mn.p815	Trust: 1.0
vendor:	lexmark	model:	mx71x	scope:	lte	version:	lw71.tu.p233	Trust: 1.0
vendor:	lexmark	model:	mx6500e	scope:	lte	version:	lw71.jd.p233	Trust: 1.0
vendor:	lexmark	model:	mx510	scope:	lte	version:	lw71.sb4.p233	Trust: 1.0
vendor:	lexmark	model:	mx31x	scope:	lte	version:	lw71.sb2.p233	Trust: 1.0
vendor:	lexmark	model:	w850	scope:	lte	version:	lp.jb.p815	Trust: 1.0
vendor:	lexmark	model:	x548	scope:	lte	version:	lhs60.vk.p705	Trust: 1.0
vendor:	lexmark	model:	xm71xx	scope:	lte	version:	lw71.tu.p233	Trust: 1.0
vendor:	lexmark	model:	ms415	scope:	lte	version:	lw71.tl2.p233	Trust: 1.0
vendor:	lexmark	model:	xs748	scope:	lte	version:	lhs60.ny.p705	Trust: 1.0
vendor:	lexmark	model:	ms811	scope:	lte	version:	lw71.dn2.p233	Trust: 1.0
vendor:	lexmark	model:	x925	scope:	lte	version:	lhs60.hk.p705	Trust: 1.0
vendor:	lexmark	model:	xs79x	scope:	lte	version:	lhs60.mr.p705	Trust: 1.0
vendor:	lexmark	model:	ms810	scope:	lte	version:	lw71.dn2.p233	Trust: 1.0
vendor:	lexmark	model:	ms410	scope:	lte	version:	lw71.prl.p233	Trust: 1.0
vendor:	lexmark	model:	ms51x	scope:	lte	version:	lw71.pr2.p233	Trust: 1.0
vendor:	lexmark	model:	mx611	scope:	lte	version:	lw71.sb7.p233	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cs41x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms1140	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms312	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms315	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms317	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms410	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms415	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2019-008728 // NVD: CVE-2019-10059

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-10059
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2019-10059
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201908-2164
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-141229
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2019-10059
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-141229
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-10059
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-141229 // JVNDB: JVNDB-2019-008728 // CNNVD: CNNVD-201908-2164 // NVD: CVE-2019-10059

PROBLEMTYPE DATA

problemtype:

CWE-254

Trust: 1.9

sources: VULHUB: VHN-141229 // JVNDB: JVNDB-2019-008728 // NVD: CVE-2019-10059

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201908-2164

TYPE

security feature problem

Trust: 0.6

sources: CNNVD: CNNVD-201908-2164

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-008728

PATCH

title:	TE923	url:	http://support.lexmark.com/index?page=content&id=TE923&locale=EN&userlocale=EN_US	Trust: 0.8
title:	Multiple Lexmark Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97648	Trust: 0.6

sources: JVNDB: JVNDB-2019-008728 // CNNVD: CNNVD-201908-2164

EXTERNAL IDS

db:	NVD	id:	CVE-2019-10059	Trust: 2.5
db:	JVNDB	id:	JVNDB-2019-008728	Trust: 0.8
db:	CNNVD	id:	CNNVD-201908-2164	Trust: 0.7
db:	VULHUB	id:	VHN-141229	Trust: 0.1

sources: VULHUB: VHN-141229 // JVNDB: JVNDB-2019-008728 // CNNVD: CNNVD-201908-2164 // NVD: CVE-2019-10059

REFERENCES

url:	http://support.lexmark.com/index?page=content&id=te923&locale=en&userlocale=en_us	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10059	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10059	Trust: 0.8
url:	http://support.lexmark.com/index?page=content&id=te923&locale=en&userlocale=en_us	Trust: 0.1

sources: VULHUB: VHN-141229 // JVNDB: JVNDB-2019-008728 // CNNVD: CNNVD-201908-2164 // NVD: CVE-2019-10059

SOURCES

db:	VULHUB	id:	VHN-141229
db:	JVNDB	id:	JVNDB-2019-008728
db:	CNNVD	id:	CNNVD-201908-2164
db:	NVD	id:	CVE-2019-10059

LAST UPDATE DATE

2024-11-23T21:59:43+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-141229	date:	2019-09-03T00:00:00
db:	JVNDB	id:	JVNDB-2019-008728	date:	2019-09-05T00:00:00
db:	CNNVD	id:	CNNVD-201908-2164	date:	2019-09-04T00:00:00
db:	NVD	id:	CVE-2019-10059	date:	2024-11-21T04:18:18.470

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-141229	date:	2019-08-28T00:00:00
db:	JVNDB	id:	JVNDB-2019-008728	date:	2019-09-05T00:00:00
db:	CNNVD	id:	CNNVD-201908-2164	date:	2019-08-28T00:00:00
db:	NVD	id:	CVE-2019-10059	date:	2019-08-28T22:15:11.703