各种Lexmark产品都存储了XSS
CVE编号
CVE-2019-19773利用情况
暂无补丁情况
N/A披露时间
2020-03-07漏洞描述
各种Lexmark产品已将XSS存储在较早的Lexmark设备中使用的嵌入式Web服务器中。受影响的产品可在http://support.lexmark.com/index?page=content&id=TE935&locale=zh-CN&userlocale=EN_US中获得。解决建议
厂商已发布了漏洞修复程序，请及时关注更新：http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US
参考链接 |
|
|---|---|
| http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | lexmark | 6500e_firmware | * | Up to (including) lhs60.jr.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c734_firmware | * | Up to (including) lr.sk.p822 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c736_firmware | * | Up to (including) lr.ske.p822 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c746_firmware | * | Up to (including) lhs60.cm2.p731 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c748_firmware | * | Up to (including) lhs60.cm4.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c792_firmware | * | Up to (including) lhs60.hc.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c925_firmware | * | Up to (including) lhs60.hv.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c950_firmware | * | Up to (including) lhs60.tp.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs31x_firmware | * | Up to (including) lw74.vyl.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs41x_firmware | * | Up to (including) lw74.vy2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs51x_firmware | * | Up to (including) lw74.vy4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs748_firmware | * | Up to (including) lhs60.cm4.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs796_firmware | * | Up to (including) lhs60.hc.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx310_firmware | * | Up to (including) lw74.gm2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx410_firmware | * | Up to (including) lw74.gm4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx510_firmware | * | Up to (including) lw74.gm7.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | e46x_firmware | * | Up to (including) lr.lbh.p822 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m1140_firmware | * | Up to (including) lw74.prl.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m1145_firmware | * | Up to (including) lw74.pr2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m3150dn_firmware | * | Up to (including) lw74.pr2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m3150_firmware | * | Up to (including) lw74.pr4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5155_firmware | * | Up to (including) lw74.dn4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5163dn_firmware | * | Up to (including) lw74.dn2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5163_firmware | * | Up to (including) lw74.dn4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5170_firmware | * | Up to (including) lw74.dn7.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms310_firmware | * | Up to (including) lw74.prl.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms312_firmware | * | Up to (including) lw74.prl.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms315_firmware | * | Up to (including) lw74.tl2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms317_firmware | * | Up to (including) lw74.prl.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms410_firmware | * | Up to (including) lw74.prl.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms415_firmware | * | Up to (including) lw74.tl2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms417_firmware | * | Up to (including) lw74.tl2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms51x_firmware | * | Up to (including) lw74.pr2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms610de_firmware | * | Up to (including) lw74.pr4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms610dn_firmware | * | Up to (including) lw74.pr2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms617_firmware | * | Up to (including) lw74.pr2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms71x_firmware | * | Up to (including) lw74.dn2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms810de_firmware | * | Up to (including) lw74.dn4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms810_firmware | * | Up to (including) lw74.dn2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms811_firmware | * | Up to (including) lw74.dn2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms812de_firmware | * | Up to (including) lw74.dn7.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms812_firmware | * | Up to (including) lw74.dn2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms817_firmware | * | Up to (including) lw74.dn2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms818_firmware | * | Up to (including) lw74.dn2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms91x_firmware | * | Up to (including) lw74.sa.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx31x_firmware | * | Up to (including) lw74.sb2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx410_firmware | * | Up to (including) lw74.sb4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx510_firmware | * | Up to (including) lw74.sb4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx511_firmware | * | Up to (including) lw74.sb4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx610_firmware | * | Up to (including) lw74.sb7.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx611_firmware | * | Up to (including) lw74.sb7.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx6500e_firmware | * | Up to (including) lw74.jd.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx71x_firmware | * | Up to (including) lw74.tu.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx81x_firmware | * | Up to (including) lw74.tu.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx91x_firmware | * | Up to (including) lw74.mg.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | t65x_firmware | * | Up to (including) lr.jp.p822 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | w850_firmware | * | Up to (including) lp.jb.p821 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x46x_firmware | * | Up to (including) lr.bs.p822 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x548_firmware | * | Up to (including) lhs60.vk.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x65x_firmware | * | Up to (including) lr.mn.p822 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x73x_firmware | * | Up to (including) lr.fl.p822 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x74x_firmware | * | Up to (including) lhs60.ny.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x792_firmware | * | Up to (including) lhs60.mr.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x86x_firmware | * | Up to (including) lp.sp.p821 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x925_firmware | * | Up to (including) lhs60.hk.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x95x_firmware | * | Up to (including) lhs60.tq.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xc2130_firmware | * | Up to (including) lw74.gm4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xc2132_firmware | * | Up to (including) lw74.gm7.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1135_firmware | * | Up to (including) lw74.sb2.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1140_firmware | * | Up to (including) lw74.sb4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1145_firmware | * | Up to (including) lw74.sb4.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm3150_firmware | * | Up to (including) lw74.sb7.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm51xx_firmware | * | Up to (including) lw74.tu.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm71xx_firmware | * | Up to (including) lw74.tu.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm91x_firmware | * | Up to (including) lw74.mg.p267 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs548_firmware | * | Up to (including) lhs60.vk.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs748_firmware | * | Up to (including) lhs60.ny.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs79x_firmware | * | Up to (including) lhs60.mr.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs925_firmware | * | Up to (including) lhs60.hk.p735 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs95x_firmware | * | Up to (including) lhs60.tq.p735 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | 6500e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c734 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c736 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c746 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c792 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c950 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs31x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs41x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs51x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs796 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx310 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | e46x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m1140 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m1145 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m3150 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m3150dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5155 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5163 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5163dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5170 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms310 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms312 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms315 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms317 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms415 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms417 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms51x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms610de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms610dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms617 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms71x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms810 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms810de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms811 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms812 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms812de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms817 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms818 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx31x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx511 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx610 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx611 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx6500e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx71x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx81x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | t65x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | w850 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x46x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x548 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x65x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x73x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x74x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x792 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x86x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x95x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xc2130 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xc2132 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1135 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1140 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1145 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm3150 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm51xx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm71xx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs548 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs79x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs95x | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 低
- 影响范围 已更改
- 用户交互 需要
- 可用性 无
- 保密性 低
- 完整性 低
| CWE-ID | 漏洞类型 |
| CWE-79 | 在Web页面生成时对输入的转义处理不恰当（跨站脚本） |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论