medium5.4
CVE-2019-19772
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices.
Impact
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lexmark | Cs31x Firmware | through lw74.vyl.p267 |
| Lexmark | Cs41x Firmware | through lw74.vy2.p267 |
| Lexmark | Cs51x Firmware | through lw74.vy4.p267 |
| Lexmark | Cx310 Firmware | through lw74.gm2.p267 |
| Lexmark | Cx410 Firmware | through lw74.gm4.p267 |
| Lexmark | Xc2130 Firmware | through lw74.gm4.p267 |
| Lexmark | Cx510 Firmware | through lw74.gm7.p267 |
| Lexmark | Xc2132 Firmware | through lw74.gm7.p267 |
| Lexmark | Ms310 Firmware | through lw74.prl.p267 |
| Lexmark | Ms312 Firmware | through lw74.prl.p267 |
| Lexmark | Ms317 Firmware | through lw74.prl.p267 |
| Lexmark | Ms410 Firmware | through lw74.prl.p267 |