Mx91x

Vendor:

First CVE: Feb 11, 2019 · Active for 7 years

14
Total CVEs
More Total CVEs than 91% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Mx91x over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 11, 2019
7 years ago
Most Recent CVE
Apr 28, 2020
2,278 days ago

CVE Severity & Scoring

Mx91x14 CVEs
All CVEs352,231 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network14 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (64.3%)
Unknown0 (0.0%)
Required5 (35.7%)
Privileges Required
Low5 (35.7%)
High0 (0.0%)
None9 (64.3%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Various Lexmark devices have a Buffer Overflow (issue 1 of 2).
Jun 28, 20199.831NONO
Various Lexmark products have an Integer Overflow.
Aug 28, 20199.830NONO
Various Lexmark products have Incorrect Access Control.
Aug 28, 20199.127NONO
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Mar 10, 20207.525NONO
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
Aug 28, 20199.824NONO
Various Lexmark products have a Buffer Overflow (issue 2 of 3).
Aug 28, 20199.824NONO
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?pa
Mar 6, 20205.419NONO
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index
Mar 6, 20205.419NONO
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.
Aug 28, 20197.519NONO
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
Aug 28, 20195.319NONO

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Mx91x

Top CWEs

Versions

No cataloged versions.