Cs41x

Vendor:

First CVE: Aug 28, 2019 · Active for 6 years

14
Total CVEs
More Total CVEs than 91% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Cs41x over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 28, 2019
6 years ago
Most Recent CVE
Apr 28, 2020
2,278 days ago

CVE Severity & Scoring

Cs41x14 CVEs
All CVEs352,231 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network14 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (64.3%)
Unknown0 (0.0%)
Required5 (35.7%)
Privileges Required
Low4 (28.6%)
High0 (0.0%)
None10 (71.4%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Various Lexmark products have an Integer Overflow.
Aug 28, 20199.830NONO
Various Lexmark products have Incorrect Access Control.
Aug 28, 20199.127NONO
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Mar 10, 20207.525NONO
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
Aug 28, 20199.824NONO
Various Lexmark products have a Buffer Overflow (issue 2 of 3).
Aug 28, 20199.824NONO
Various Lexmark products have CSRF.
Aug 28, 20196.522NONO
Various Lexmark products have Incorrect Access Control (issue 2 of 2).
Aug 28, 20195.320NONO
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?pa
Mar 6, 20205.419NONO
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index
Mar 6, 20205.419NONO
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.
Aug 28, 20197.519NONO

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Cs41x

Top CWEs

Versions

No cataloged versions.