Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-6489

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 5.3, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts limited integrity, for affected systems. Impacting 80 products from lexmark, from lexmark, from lexmark and 77 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2019, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2019-02-11T21:29:00.333

Last Modified

2026-06-17T02:39:07.803

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lexmark xm5163_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm5163 - No
Operating System lexmark xm5170_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm5170 - No
Operating System lexmark xm7155_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm7155 - No
Operating System lexmark xm7163_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm7163 - No
Operating System lexmark xm7170_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm7170 - No
Operating System lexmark xm7155x_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm7155x - No
Operating System lexmark xm7163x_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm7163x - No
Operating System lexmark xm7170x_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark xm7170x - No
Operating System lexmark cx310_firmware ≤ lw71.gm2.p216 Yes
Hardware lexmark cx310 - No
Operating System lexmark cx410_firmware ≤ lw71.gm4.p216 Yes
Hardware lexmark cx410 - No
Operating System lexmark cx510_firmware ≤ lw71.gm7.p216 Yes
Hardware lexmark cx510 - No
Operating System lexmark xc2132_firmware ≤ lw71.gm7.p216 Yes
Hardware lexmark xc2132 - No
Operating System lexmark mx31x_firmware ≤ lw71.sb2.p216 Yes
Hardware lexmark mx31x - No
Operating System lexmark mx410_firmware ≤ lw71.sb4.p216 Yes
Hardware lexmark mx410 - No
Operating System lexmark mx510_firmware ≤ lw71.sb4.p216 Yes
Hardware lexmark mx510 - No
Operating System lexmark mx511_firmware ≤ lw71.sb4.p216 Yes
Hardware lexmark mx511 - No
Operating System lexmark xm1145_firmware ≤ lw71.sb4.p216 Yes
Hardware lexmark xm1145 - No
Operating System lexmark mx610_firmware ≤ lw71.sb7.p216 Yes
Hardware lexmark mx610 - No
Operating System lexmark mx611_firmware ≤ lw71.sb7.p216 Yes
Hardware lexmark mx611 - No
Operating System lexmark xm3150_firmware ≤ lw71.sb7.p216 Yes
Hardware lexmark xm3150 - No
Operating System lexmark mx71x_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark mx71x - No
Operating System lexmark mx81x_firmware ≤ lw71.tu.p216 Yes
Hardware lexmark mx81x - No
Operating System lexmark mx91x_firmware ≤ lw71.mg.p216 Yes
Hardware lexmark mx91x - No
Operating System lexmark xm91x_firmware ≤ lw71.mg.p216 Yes
Hardware lexmark xm91x - No
Operating System lexmark mx6500e_firmware ≤ lw71.jd.p216 Yes
Hardware lexmark mx6500e - No
Operating System lexmark x548_firmware ≤ lhs60.vk.p682 Yes
Hardware lexmark x548 - No
Operating System lexmark xs548_firmware ≤ lhs60.vk.p682 Yes
Hardware lexmark xs548 - No
Operating System lexmark x74x_firmware ≤ lhs60.ny.p682 Yes
Hardware lexmark x74x - No
Operating System lexmark xs748_firmware ≤ lhs60.ny.p682 Yes
Hardware lexmark xs748 - No
Operating System lexmark x792_firmware ≤ lhs60.mr.p682 Yes
Hardware lexmark x792 - No
Operating System lexmark xs79x_firmware ≤ lhs60.mr.p682 Yes
Hardware lexmark xs79x - No
Operating System lexmark x925_firmware ≤ lhs60.hk.p682 Yes
Hardware lexmark x925 - No
Operating System lexmark xs925_firmware ≤ lhs60.hk.p682 Yes
Hardware lexmark xs925 - No
Operating System lexmark x95x_firmware ≤ lhs60.tq.p682 Yes
Hardware lexmark x95x - No
Operating System lexmark xs95x_firmware ≤ lhs60.tq.p682 Yes
Hardware lexmark xs95x - No
Operating System lexmark 6500e_firmware ≤ lhs60.jr.p809 Yes
Hardware lexmark 6500e - No
Operating System lexmark x46x_firmware ≤ lr.bs.p809 Yes
Hardware lexmark x46x - No
Operating System lexmark x65x_firmware ≤ lr.mn.p809 Yes
Hardware lexmark x65x - No
Operating System lexmark x73x_firmware ≤ lr.fl.p809 Yes
Hardware lexmark x73x - No
Operating System lexmark x86x_firmware ≤ lp.sp.p809 Yes
Hardware lexmark x86x - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For lexmark's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.