high7.5Public exploit code
CVE-2019-16758
In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal2019-11-18 · webapps · hardware
Impact
In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lexmark | Services Monitor Firmware | Version 2.27.4.0.39 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155365/Lexmark-Services-Monitor-2.27.4.0.39-Directory-Traversal.html
- http://seclists.org/fulldisclosure/2019/Nov/17
- http://support.lexmark.com/index?page=content&id=TE930&locale=en&userlocale=EN_US
- https://www.symantec.com/security-center/vulnerabilities/writeup/110943
- http://packetstormsecurity.com/files/155365/Lexmark-Services-Monitor-2.27.4.0.39-Directory-Traversal.html
- http://seclists.org/fulldisclosure/2019/Nov/17
- http://support.lexmark.com/index?page=content&id=TE930&locale=en&userlocale=EN_US
- https://www.symantec.com/security-center/vulnerabilities/writeup/110943