Incorrect Access Control in Various Lexmark Products
CVE-2019-9935

5.3MEDIUM

Key Information:

Vendor
Lexmark
Status
Cs31x Firmware
Vendor
CVE Published:
28 August 2019

Summary

Some Lexmark printers and multifunction devices exhibit incorrect access control, allowing unauthorized users to gain access to sensitive functionalities and configurations. This vulnerability potentially compromises the confidentiality and integrity of information processed by the affected devices. Users are encouraged to take appropriate measures to secure their devices and review access permissions regularly.

References

http://support.lexmark.com/index?page=content&id=TE924&lo...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.