Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-9933


Various Lexmark products have a Buffer Overflow (issue 3 of 3).


Security Impact Summary

This vulnerability carries a CRITICAL severity rating with a CVSS v3.1 score of 9.8, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 142 products from lexmark, from lexmark, from lexmark and 139 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2019, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2019-08-28T22:15:12.343

Last Modified

2026-06-17T02:44:52.893

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lexmark cs31x_firmware ≤ lw71.vyl.p230 Yes
Hardware lexmark cs31x - No
Operating System lexmark cs41x_firmware ≤ lw71.vy2.p230 Yes
Hardware lexmark cs41x - No
Operating System lexmark cx310_firmware ≤ lw71.gm2.p230 Yes
Hardware lexmark cx310 - No
Operating System lexmark ms310_firmware ≤ lw71.prl.p230 Yes
Hardware lexmark ms310 - No
Operating System lexmark ms312_firmware ≤ lw71.prl.p230 Yes
Hardware lexmark ms312 - No
Operating System lexmark ms317_firmware ≤ lw71.prl.p230 Yes
Hardware lexmark ms317 - No
Operating System lexmark ms410_firmware ≤ lw71.prl.p230 Yes
Hardware lexmark ms410 - No
Operating System lexmark m1140_firmware ≤ lw71.prl.p230 Yes
Hardware lexmark m1140 - No
Operating System lexmark ms315_firmware ≤ lw71.tl2.p230 Yes
Hardware lexmark ms315 - No
Operating System lexmark ms415_firmware ≤ lw71.tl2.p230 Yes
Hardware lexmark ms415 - No
Operating System lexmark ms417_firmware ≤ lw71.tl2.p230 Yes
Hardware lexmark ms417 - No
Operating System lexmark ms51x_firmware ≤ lw71.pr2.p230 Yes
Hardware lexmark ms51x - No
Operating System lexmark ms610dn_firmware ≤ lw71.pr2.p230 Yes
Hardware lexmark ms610dn - No
Operating System lexmark ms617_firmware ≤ lw71.pr2.p230 Yes
Hardware lexmark ms617 - No
Operating System lexmark m1145_firmware ≤ lw71.pr2.p230 Yes
Hardware lexmark m1145 - No
Operating System lexmark m3150dn_firmware ≤ lw71.pr2.p230 Yes
Hardware lexmark m3150dn - No
Operating System lexmark ms71x_firmware ≤ lw71.dn2.p230 Yes
Hardware lexmark ms71x - No
Operating System lexmark m5163dn_firmware ≤ lw71.dn2.p230 Yes
Hardware lexmark m5163dn - No
Operating System lexmark ms810_firmware ≤ lw71.dn2.p230 Yes
Hardware lexmark ms810 - No
Operating System lexmark ms811_firmware ≤ lw71.dn2.p230 Yes
Hardware lexmark ms811 - No
Operating System lexmark ms812_firmware ≤ lw71.dn2.p230 Yes
Hardware lexmark ms812 - No
Operating System lexmark ms817_firmware ≤ lw71.dn2.p230 Yes
Hardware lexmark ms817 - No
Operating System lexmark ms818_firmware ≤ lw71.dn2.p230 Yes
Hardware lexmark ms818 - No
Operating System lexmark ms810de_firmware ≤ lw71.dn4.p230 Yes
Hardware lexmark ms810de - No
Operating System lexmark m5155_firmware ≤ lw71.dn4.p230 Yes
Hardware lexmark m5155 - No
Operating System lexmark m5163_firmware ≤ lw71.dn4.p230 Yes
Hardware lexmark m5163 - No
Operating System lexmark ms812de_firmware ≤ lw71.dn7.p230 Yes
Hardware lexmark ms812de - No
Operating System lexmark m5170_firmware ≤ lw71.dn7.p230 Yes
Hardware lexmark m5170 - No
Operating System lexmark ms91x_firmware ≤ lw71.sa.p230 Yes
Hardware lexmark ms91x - No
Operating System lexmark mx31x_firmware ≤ lw71.sb2.p230 Yes
Hardware lexmark mx31x - No
Operating System lexmark xm1135_firmware ≤ lw71.sb2.p230 Yes
Hardware lexmark xm1135 - No
Operating System lexmark mx410_firmware ≤ lw71.sb4.p230 Yes
Hardware lexmark mx410 - No
Operating System lexmark mx510_firmware ≤ lw71.sb4.p230 Yes
Hardware lexmark mx510 - No
Operating System lexmark mx511_firmware ≤ lw71.sb4.p230 Yes
Hardware lexmark mx511 - No
Operating System lexmark mx610_firmware ≤ lw71.sb7.p230 Yes
Hardware lexmark mx610 - No
Operating System lexmark mx611_firmware ≤ lw71.sb7.p230 Yes
Hardware lexmark mx611 - No
Operating System lexmark xm3150_firmware ≤ lw71.sb7.p230 Yes
Hardware lexmark xm3150 - No
Operating System lexmark mx71x_firmware ≤ lw71.tu.p230 Yes
Hardware lexmark mx71x - No
Operating System lexmark mx81x_firmware ≤ lw71.tu.p230 Yes
Hardware lexmark mx81x - No
Operating System lexmark xm51xx_firmware ≤ lw71.tu.p230 Yes
Hardware lexmark xm51xx - No
Operating System lexmark xm71xx_firmware ≤ lw71.tu.p230 Yes
Hardware lexmark xm71xx - No
Operating System lexmark mx91x_firmware ≤ lw71.mg.p230 Yes
Hardware lexmark mx91x - No
Operating System lexmark xm91x_firmware ≤ lw71.mg.p230 Yes
Hardware lexmark xm91x - No
Operating System lexmark mx6500e_firmware ≤ lw71.jd.p230 Yes
Hardware lexmark mx6500e - No
Operating System lexmark c746_firmware ≤ lhs60.cm2.p705 Yes
Hardware lexmark c746 - No
Operating System lexmark c748_firmware ≤ lhs60.cm4.p705 Yes
Hardware lexmark c748 - No
Operating System lexmark cs748_firmware ≤ lhs60.cm4.p705 Yes
Hardware lexmark cs748 - No
Operating System lexmark c792_firmware ≤ lhs60.hc.p705 Yes
Hardware lexmark c792 - No
Operating System lexmark cs796_firmware ≤ lhs60.hc.p705 Yes
Hardware lexmark cs796 - No
Operating System lexmark c925_firmware ≤ lhs60.hv.p705 Yes
Hardware lexmark c925 - No
Operating System lexmark c950_firmware ≤ lhs60.tp.p705 Yes
Hardware lexmark c950 - No
Operating System lexmark x548_firmware ≤ lhs60.vk.p705 Yes
Hardware lexmark x548 - No
Operating System lexmark xs548_firmware ≤ lhs60.vk.p705 Yes
Hardware lexmark xs548 - No
Operating System lexmark x74x_firmware ≤ lhs60.ny.p705 Yes
Hardware lexmark x74x - No
Operating System lexmark xs748_firmware ≤ lhs60.ny.p705 Yes
Hardware lexmark xs748 - No
Operating System lexmark x792_firmware ≤ lhs60.mr.p705 Yes
Hardware lexmark x792 - No
Operating System lexmark xs79x_firmware ≤ lhs60.mr.p705 Yes
Hardware lexmark xs79x - No
Operating System lexmark x925_firmware ≤ lhs60.hk.p705 Yes
Hardware lexmark x925 - No
Operating System lexmark xs925_firmware ≤ lhs60.hk.p705 Yes
Hardware lexmark xs925 - No
Operating System lexmark x95x_firmware ≤ lhs60.tq.p705 Yes
Hardware lexmark x95x - No
Operating System lexmark xs95x_firmware ≤ lhs60.tq.p705 Yes
Hardware lexmark xs95x - No
Operating System lexmark 6500e_firmware ≤ lhs60.jr.p705 Yes
Hardware lexmark 6500e - No
Operating System lexmark c734_firmware ≤ lr.sk.p815 Yes
Hardware lexmark c734 - No
Operating System lexmark c736_firmware ≤ lr.ske.p815 Yes
Hardware lexmark c736 - No
Operating System lexmark e46x_firmware ≤ lr.lbh.p815 Yes
Hardware lexmark e46x - No
Operating System lexmark t65x_firmware ≤ lr.jp.p815 Yes
Hardware lexmark t65x - No
Operating System lexmark x46x_firmware ≤ lr.bs.p815 Yes
Hardware lexmark x46x - No
Operating System lexmark x65x_firmware ≤ lr.mn.p815 Yes
Hardware lexmark x65x - No
Operating System lexmark x73x_firmware ≤ lr.fl.p815 Yes
Hardware lexmark x73x - No
Operating System lexmark w850_firmware ≤ lp.jb.p815 Yes
Hardware lexmark w850 - No
Operating System lexmark x86x_firmware ≤ lp.sp.p815 Yes
Hardware lexmark x86x - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For lexmark's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.