VAR-201908-1620
Vulnerability from variot - Updated: 2024-11-23 22:06Various Lexmark products have CSRF. plural Lexmark The product contains a cross-site request forgery vulnerability.Information may be tampered with. Lexmark CS31x and others are all printers from Lexmark. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit this vulnerability to send unexpected requests to the server through an affected client. The following products and versions are affected: Lexmark CS31x; CS41x; CX310; MS310; MS312; MS317; MS410; M1140; MS315; MS415; MS417; MS811; MS812; MS817; MS818
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201908-1620",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "ms51x",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.pr2.p228"
},
{
"model": "ms315",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.tl2.p228"
},
{
"model": "ms312",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.prl.p228"
},
{
"model": "ms417",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.tl2.p228"
},
{
"model": "ms610dn",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.pr2.p228"
},
{
"model": "xm1135",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.sb2.p228"
},
{
"model": "cs41x",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.vy2.p228"
},
{
"model": "cs31x",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.vyl.p228"
},
{
"model": "m5163dn",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.dn2.p228"
},
{
"model": "ms818",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.dn2.p228"
},
{
"model": "ms71x",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.dn2.p228"
},
{
"model": "ms817",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.dn2.p228"
},
{
"model": "ms810",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.dn2.p228"
},
{
"model": "ms410",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.prl.p228"
},
{
"model": "ms811",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.dn2.p228"
},
{
"model": "m3150dn",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.pr2.p228"
},
{
"model": "ms617",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.pr2.p228"
},
{
"model": "ms317",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.prl.p228"
},
{
"model": "cx310",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.gm2.p228"
},
{
"model": "m1145",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.pr2.p228"
},
{
"model": "ms310",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.prl.p228"
},
{
"model": "ms415",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.tl2.p228"
},
{
"model": "ms812",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.dn2.p228"
},
{
"model": "mx31x",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.sb2.p228"
},
{
"model": "m1140",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lw71.prl.p228"
},
{
"model": "cs31x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs41x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx310",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "ms1140",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "ms310",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "ms312",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "ms315",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "ms317",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "ms410",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "ms415",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:lexmark:cs31x_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:cs41x_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:cx310_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:m1140_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:ms310_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:ms312_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:ms315_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:ms317_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:ms410_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:ms415_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
}
]
},
"cve": "CVE-2019-10057",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CVE-2019-10057",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-141227",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 2.8,
"id": "CVE-2019-10057",
"impactScore": 3.6,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-10057",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2019-10057",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201908-2163",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-141227",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2019-10057",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-141227"
},
{
"db": "VULMON",
"id": "CVE-2019-10057"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2163"
},
{
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Various Lexmark products have CSRF. plural Lexmark The product contains a cross-site request forgery vulnerability.Information may be tampered with. Lexmark CS31x and others are all printers from Lexmark. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit this vulnerability to send unexpected requests to the server through an affected client. The following products and versions are affected: Lexmark CS31x; CS41x; CX310; MS310; MS312; MS317; MS410; M1140; MS315; MS415; MS417; MS811; MS812; MS817; MS818",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-10057"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "VULHUB",
"id": "VHN-141227"
},
{
"db": "VULMON",
"id": "CVE-2019-10057"
}
],
"trust": 1.8
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-10057",
"trust": 2.6
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2163",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-141227",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2019-10057",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-141227"
},
{
"db": "VULMON",
"id": "CVE-2019-10057"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2163"
},
{
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"id": "VAR-201908-1620",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-141227"
}
],
"trust": 0.01
},
"last_update_date": "2024-11-23T22:06:01.980000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE921",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE921\u0026locale=EN\u0026userlocale=EN_US"
},
{
"title": "Multiple Lexmark Repair measures for product cross-site request forgery vulnerability",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97647"
},
{
"title": "Threatpost",
"trust": 0.1,
"url": "https://threatpost.com/office-printers-hackers-open-door/147083/"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-10057"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2163"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-352",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-141227"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://support.lexmark.com/index?page=content\u0026id=te921\u0026locale=en\u0026userlocale=en_us"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-10057"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10057"
},
{
"trust": 0.1,
"url": "http://support.lexmark.com/index?page=content\u0026amp;id=te921\u0026amp;locale=en\u0026amp;userlocale=en_us"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/352.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://threatpost.com/office-printers-hackers-open-door/147083/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-141227"
},
{
"db": "VULMON",
"id": "CVE-2019-10057"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2163"
},
{
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-141227"
},
{
"db": "VULMON",
"id": "CVE-2019-10057"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2163"
},
{
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-08-28T00:00:00",
"db": "VULHUB",
"id": "VHN-141227"
},
{
"date": "2019-08-28T00:00:00",
"db": "VULMON",
"id": "CVE-2019-10057"
},
{
"date": "2019-09-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"date": "2019-08-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2163"
},
{
"date": "2019-08-28T22:15:11.640000",
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-08-29T00:00:00",
"db": "VULHUB",
"id": "VHN-141227"
},
{
"date": "2019-08-29T00:00:00",
"db": "VULMON",
"id": "CVE-2019-10057"
},
{
"date": "2019-09-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-008491"
},
{
"date": "2019-08-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2163"
},
{
"date": "2024-11-21T04:18:18.080000",
"db": "NVD",
"id": "CVE-2019-10057"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2163"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Lexmark Product cross-site request forgery vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-008491"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cross-site request forgery",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2163"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…