PT-2019-14815 · Lexmark · Lexmark Services Monitor
Kevin Randall
·
Publicado
2019-11-19
·
Atualizado
2020-01-22
·
CVE-2019-16758
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Lexmark Services Monitor version 2.27.4.0.39
Description
A remote attacker can exploit a directory traversal issue in the Lexmark Services Monitor to obtain local files on the host operating system. This can be achieved by using a directory traversal technique with
/../../../ or ..%2F..%2F..%2F. The service is running on TCP port 2070.Recommendations
For Lexmark Services Monitor version 2.27.4.0.39, consider restricting access to the service running on TCP port 2070 until a patch is available. As a temporary workaround, limit the service's ability to access local files on the host operating system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Lexmark Services Monitor