CVE-2018-15520

high-risk

Published 2019-06-28

Various Lexmark devices have a Buffer Overflow (issue 2 of 2).

Do I need to act?

0.54% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Cx82X Firmware

Cx860 Firmware

Xc6152 Firmware

Xc8155 Firmware

Xc8160 Firmware

Cx72X Firmware

Xc41X0 Firmware

Cx92X Firmware

Xc92X5 Firmware

Mx321 Firmware

Mb2338 Firmware

Mx42X Firmware

Mx52X Firmware

Mx622 Firmware

Mb2442 Firmware

Mb2546 Firmware

Mb2650 Firmware

Xm124X Firmware

Xm3250 Firmware

Mx72X Firmware

Lexmark

Vendor Advisory http://support.lexmark.com/index?page=content&id=TE892

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 2/34 · Minimal

Exposure 23/34 · High