PT-2020-11919 · Lexmark · Lexmark Cx510+59

Published 2020-04-28 · Updated 2020-05-04 · CVE-2020-10094

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Lexmark CS31x versions before LW74.VYL.P273 Lexmark CS41x versions before LW74.VY2.P273 Lexmark CS51x versions before LW74.VY4.P273 Lexmark CX310 version before LW74.GM2.P273 Lexmark CX410 and XC2130 version before LW74.GM4.P273 Lexmark CX510 and XC2132 version before LW74.GM7.P273 Lexmark MS310, MS312, MS317 versions before LW74.PRL.P273 Lexmark MS410, M1140 versions before LW74.PRL.P273 Lexmark MS315, MS415, MS417 versions before LW74.TL2.P273 Lexmark MS51x, MS610dn, MS617 versions before LW74.PR2.P273 Lexmark M1145, M3150dn versions before LW74.PR2.P273 Lexmark MS610de, M3150 version before LW74.PR4.P273 Lexmark MS71x, M5163dn versions before LW74.DN2.P273 Lexmark MS810, MS811, MS812, MS817, MS818 versions before LW74.DN2.P273 Lexmark MS810de, M5155, M5163 versions before LW74.DN4.P273 Lexmark MS812de, M5170 version before LW74.DN7.P273 Lexmark MS91x version before LW74.SA.P273 Lexmark MX31x, XM1135 versions before LW74.SB2.P273 Lexmark MX410, MX510, MX511 versions before LW74.SB4.P273 Lexmark XM1140, XM1145 versions before LW74.SB4.P273 Lexmark MX610, MX611 versions before LW74.SB7.P273 Lexmark XM3150 version before LW74.SB7.P273 Lexmark MX71x, MX81x versions before LW74.TU.P273 Lexmark XM51xx, XM71xx versions before LW74.TU.P273 Lexmark MX91x, XM91x versions before LW74.MG.P273 Lexmark MX6500e version before LW74.JD.P273 Lexmark C746 version before LHS60.CM2.P738 Lexmark C748, CS748 versions before LHS60.CM4.P738 Lexmark C792, CS796 versions before LHS60.HC.P738 Lexmark C925 version before LHS60.HV.P738 Lexmark C950 version before LHS60.TP.P738 Lexmark X548, XS548 versions before LHS60.VK.P738 Lexmark X74x, XS748 versions before LHS60.NY.P738 Lexmark X792, XS79x versions before LHS60.MR.P738 Lexmark X925, XS925 versions before LHS60.HK.P738 Lexmark X95x, XS95x versions before LHS60.TQ.P738 Lexmark 6500e version before LHS60.JR.P738 Lexmark C734 versions LR.SK.P824 and earlier Lexmark C736 versions LR.SKE.P824 and earlier Lexmark E46x versions LR.LBH.P824 and earlier Lexmark T65x versions LR.JP.P824 and earlier Lexmark X46x versions LR.BS.P824 and earlier Lexmark X65x versions LR.MN.P824 and earlier Lexmark X73x versions LR.FL.P824 and earlier Lexmark W850 versions LP.JB.P823 and earlier Lexmark X86x versions LP.SP.P823 and earlier

Description A cross-site scripting (XSS) issue affects various Lexmark printer models. This issue allows for the execution of malicious scripts within the browser of a user.

Recommendations For Lexmark CS31x, update to a version after LW74.VYL.P273. For Lexmark CS41x, update to a version after LW74.VY2.P273. For Lexmark CS51x, update to a version after LW74.VY4.P273. For Lexmark CX310, update to a version after LW74.GM2.P273. For Lexmark CX410 and XC2130, update to a version after LW74.GM4.P273. For Lexmark CX510 and XC2132, update to a version after LW74.GM7.P273. For Lexmark MS310, MS312, MS317, update to a version after LW74.PRL.P273. For Lexmark MS410, M1140, update to a version after LW74.PRL.P273. For Lexmark MS315, MS415, MS417, update to a version after LW74.TL2.P273. For Lexmark MS51x, MS610dn, MS617, update to a version after LW74.PR2.P273. For Lexmark M1145, M3150dn, update to a version after LW74.PR2.P273. For Lexmark MS610de, M3150, update to a version after LW74.PR4.P273. For Lexmark MS71x, M5163dn, update to a version after LW74.DN2.P273. For Lexmark MS810, MS811, MS812, MS817, MS818, update to a version after LW74.DN2.P273. For Lexmark MS810de, M5155, M5163, update to a version after LW74.DN4.P273. For Lexmark MS812de, M5170, update to a version after LW74.DN7.P273. For Lexmark MS91x, update to a version after LW74.SA.P273. For Lexmark MX31x, XM1135, update to a version after LW74.SB2.P273. For Lexmark MX410, MX510, MX511, update to a version after LW74.SB4.P273. For Lexmark XM1140, XM1145, update to a version after LW74.SB4.P273. For Lexmark MX610, MX611, update to a version after LW74.SB7.P273. For Lexmark XM3150, update to a version after LW74.SB7.P273. For Lexmark MX71x, MX81x, update to a version after LW74.TU.P273. For Lexmark XM51xx, XM71xx, update to a version after LW74.TU.P273. For Lexmark MX91x, XM91x, update to a version after LW74.MG.P273. For Lexmark MX6500e, update to a version after LW74.JD.P273. For Lexmark C746, update to a version after LHS60.CM2.P738. For Lexmark C748, CS748, update to a version after LHS60.CM4.P738. For Lexmark C792, CS796, update to a version after LHS60.HC.P738. For Lexmark C925, update to a version after LHS60.HV.P738. For Lexmark C950, update to a version after LHS60.TP.P738. For Lexmark X548, XS548, update to a version after LHS60.VK.P738. For Lexmark X74x, XS748, update to a version after LHS60.NY.P738. For Lexmark X792, XS79x, update to a version after LHS60.MR.P738. For Lexmark X925, XS925, update to a version after LHS60.HK.P738. For Lexmark X95x, XS95x, update to a version after LHS60.TQ.P738. For Lexmark 6500e, update to a version after LHS60.JR.P738. For Lexmark C734, update to a version after LR.SK.P824. For Lexmark C736, update to a version after LR.SKE.P824. For Lexmark E46x, update to a version after LR.LBH.P824. For Lexmark T65x, update to a version after LR.JP.P824. For Lexmark X46x, update to a version after LR.BS.P824. For Lexmark X65x, update to a version after LR.MN.P824. For Lexmark X73x, update to a version after LR.FL.P824. For Lexmark W850, update to a version after LP.JB.P823. For Lexmark X86x, update to a version after LP.SP.P823.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-10094

Affected Products

Lexmark 6500E

Lexmark C734

Lexmark C736

Lexmark C746

Lexmark C748

Lexmark C792

Lexmark C925

Lexmark C950

Lexmark Cs31X

Lexmark Cs41X

Lexmark Cs51X

Lexmark Cs748

Lexmark Cs796

Lexmark Cx310

Lexmark Cx410

Lexmark Cx510

Lexmark E46X

Lexmark M1140

Lexmark M1145

Lexmark M3150

Lexmark M5155

Lexmark M5163

Lexmark M5170

Lexmark Ms310

Lexmark Ms312

Lexmark Ms315

Lexmark Ms317

Lexmark Ms410

Lexmark Ms415

Lexmark Ms417

Lexmark Ms610De

Lexmark Ms617

Lexmark Ms71X

Lexmark Ms810

Lexmark Ms811

Lexmark Ms812

Lexmark Ms817

Lexmark Ms818

Lexmark Ms91X

Lexmark Mx31X

Lexmark Mx511

Lexmark Mx610

Lexmark Mx611

Lexmark Mx81X

Lexmark T65X

Lexmark W850

Lexmark X46X

Lexmark X548

Lexmark X73X

Lexmark X74X

Lexmark X792

Lexmark X86X

Lexmark X925

Lexmark X95X

Lexmark Xc2130

Lexmark Xc2132

Lexmark Xm1135

Lexmark Xm51Xx

Lexmark Xm71Xx

Lexmark Xs79X

References · 4

• http://support.lexmark.com/index?page=content&id=TE936 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10094 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10094 · Vendor Advisory
• https://t.me/cvenotify/3313 · Telegram Post