CVE编号
CVE-2019-18791利用情况
暂无补丁情况
N/A披露时间
2020-02-14漏洞描述
Lexmark打印机MS812和多个较早版本的Lexmark设备在嵌入式Web服务器中存储了XSS漏洞。可以利用此漏洞通过用户Web浏览器公开会话凭据和其他信息。解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：http://support.lexmark.com/index?page=content&id=TE933&modifiedDate=02/04/20&actp=LIST_RECENT&userlocale=EN_US&locale=en
参考链接 |
|
|---|---|
| http://support.lexmark.com/alerts/ | |
| http://support.lexmark.com/index?page=content&id=TE933&modifiedDate=02/04/20&... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | lexmark | 6500e_firmware | * |
Up to (including) lhs60.jr.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c734_firmware | * |
Up to (including) lr.sk.p822 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c736_firmware | * |
Up to (including) lr.ske.p822 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c746_firmware | * |
Up to (including) lhs60.cm2.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c748_firmware | * |
Up to (including) lhs60.cm4.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c792_firmware | * |
Up to (including) lhs60.hc.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c925_firmware | * |
Up to (including) lhs60.hv.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c950_firmware | * |
Up to (including) lhs60.tp.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs748_firmware | * |
Up to (including) lhs60.cm4.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs796_firmware | * |
Up to (including) lhs60.hc.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx310_firmware | * |
Up to (including) lw73.gm2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx31x_firmware | * |
Up to (including) lw73.vyl.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx410_firmware | * |
Up to (including) lw73.gm4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx41x_firmware | * |
Up to (including) lw73.vy2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx510_firmware | * |
Up to (including) lw73.gm7.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx51x_firmware | * |
Up to (including) lw73.vy4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | e46x_firmware | * |
Up to (including) lr.lbh.p822 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m1140_firmware | * |
Up to (including) lw73.prl.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m1145_firmware | * |
Up to (including) lw73.pr2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m3150dn_firmware | * |
Up to (including) lw73.pr2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m3150_firmware | * |
Up to (including) lw73.pr4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5155_firmware | * |
Up to (including) lw73.dn4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5163dn_firmware | * |
Up to (including) lw73.dn2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5163_firmware | * |
Up to (including) lw73.dn4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5170_firmware | * |
Up to (including) lw73.dn7.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms310_firmware | * |
Up to (including) lw73.prl.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms312_firmware | * |
Up to (including) lw73.prl.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms315_firmware | * |
Up to (including) lw73.tl2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms317_firmware | * |
Up to (including) lw73.prl.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms410_firmware | * |
Up to (including) lw73.prl.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms415_firmware | * |
Up to (including) lw73.tl2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms417_firmware | * |
Up to (including) lw73.tl2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms51x_firmware | * |
Up to (including) lw73.pr2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms610de_firmware | * |
Up to (including) lw73.pr4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms610dn_firmware | * |
Up to (including) lw73.pr2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms617_firmware | * |
Up to (including) lw73.pr2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms71x_firmware | * |
Up to (including) lw73.dn2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms810de_firmware | * |
Up to (including) lw73.dn4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms810_firmware | * |
Up to (including) lw73.dn2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms811_firmware | * |
Up to (including) lw73.dn2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms812de_firmware | * |
Up to (including) lw73.dn7.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms812_firmware | * |
Up to (including) lw73.dn2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms817_firmware | * |
Up to (including) lw73.dn2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms818_firmware | * |
Up to (including) lw73.dn2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms91x_firmware | * |
Up to (including) lw73.sa.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx31x_firmware | * |
Up to (including) lw73.sb2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx410_firmware | * |
Up to (including) lw73.sb4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx510_firmware | * |
Up to (including) lw73.sb4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx511_firmware | * |
Up to (including) lw73.sb4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx610_firmware | * |
Up to (including) lw73.sb7.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx611_firmware | * |
Up to (including) lw73.sb7.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx6500e_firmware | * |
Up to (including) lw73.jd.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx71x_firmware | * |
Up to (including) lw73.tu.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx81x_firmware | * |
Up to (including) lw73.tu.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx91x_firmware | * |
Up to (including) lw73.mg.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | t65x_firmware | * |
Up to (including) lr.jp.p822 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | w850_firmware | * |
Up to (including) lp.jb.p821 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x46x_firmware | * |
Up to (including) lr.bs.p822 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x548_firmware | * |
Up to (including) lhs60.vk.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x65x_firmware | * |
Up to (including) lr.mn.p822 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x73x_firmware | * |
Up to (including) lr.fl.p822 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x74x_firmware | * |
Up to (including) lhs60.ny.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x792_firmware | * |
Up to (including) lhs60.mr.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x86x_firmware | * |
Up to (including) lp.sp.p821 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x925_firmware | * |
Up to (including) lhs60.hk.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x95x_firmware | * |
Up to (including) lhs60.tq.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xc2130_firmware | * |
Up to (including) lw73.gm4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xc2132_firmware | * |
Up to (including) lw73.gm7.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1135_firmware | * |
Up to (including) lw73.sb2.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1140_firmware | * |
Up to (including) lw73.sb4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1145_firmware | * |
Up to (including) lw73.sb4.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm3150_firmware | * |
Up to (including) lw73.sb7.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm51xx_firmware | * |
Up to (including) lw73.tu.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm71xx_firmware | * |
Up to (including) lw73.tu.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm91x_firmware | * |
Up to (including) lw73.mg.p263 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs548_firmware | * |
Up to (including) lhs60.vk.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs748_firmware | * |
Up to (including) lhs60.ny.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs79x_firmware | * |
Up to (including) lhs60.mr.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs925_firmware | * |
Up to (including) lhs60.hk.p731 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs95x_firmware | * |
Up to (including) lhs60.tq.p731 |
|||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | 6500e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c734 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c736 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c746 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c792 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c950 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs796 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx310 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx31x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx41x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx51x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | e46x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m1140 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m1145 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m3150 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m3150dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5155 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5163 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5163dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5170 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms310 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms312 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms315 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms317 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms415 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms417 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms51x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms610de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms610dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms617 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms71x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms810 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms810de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms811 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms812 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms812de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms817 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms818 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx31x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx511 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx610 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx611 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx6500e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx71x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx81x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | t65x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | w850 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x46x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x548 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x65x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x73x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x74x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x792 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x86x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x95x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xc2130 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xc2132 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1135 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1140 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1145 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm3150 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm51xx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm71xx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs548 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs79x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs95x | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 低
- 影响范围 已更改
- 用户交互 需要
- 可用性 无
- 保密性 低
- 完整性 低
还没有评论，来说两句吧...