What’s Vulnerable › Vulnerabilities
CVE-2019-10059
- Severity: medium (CVSS 5.3 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-08-28 · updated 2026-06-17
- Weakness: CWE-254
Description
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
Affected products
- Lexmark 6500E Firmware: through lhs60.jr.p705
- Lexmark C734 Firmware: through lr.sk.p815
- Lexmark C736 Firmware: through lr.ske.p815
- Lexmark C746 Firmware: through lhs60.cm2.p705
- Lexmark C748 Firmware: through lhs60.cm4.p705
- Lexmark C792 Firmware: through lhs60.hc.p705
- Lexmark C925 Firmware: through lhs60.hv.p705
- Lexmark C950 Firmware: through lhs60.tp.p705
- Lexmark Cs31X Firmware: through lw71.vyl.p233
- Lexmark Cs41X Firmware: through lw71.vy2.p233
- Lexmark Cs748 Firmware: through lhs60.cm4.p705
- Lexmark Cs796 Firmware: through lhs60.hc.p705
- Lexmark Cx310 Firmware: through lw71.gm2.p233
- Lexmark E46X Firmware: through lr.lbh.p815
- Lexmark M1140 Firmware: through lw71.prl.p233
- Lexmark M1145 Firmware: through lw71.pr2.p233
- Lexmark M3150Dn Firmware: through lw71.pr2.p233
- Lexmark M5155 Firmware: through lw71.dn4.p233
- Lexmark M5163 Firmware: through lw71.dn4.p233
- Lexmark M5163Dn Firmware: through lw71.dn2.p233
- Lexmark M5170 Firmware: through lw71.dn7.p233
- Lexmark Ms310 Firmware: through lw71.prl.p233
- Lexmark Ms312 Firmware: through lw71.prl.p233
- Lexmark Ms315 Firmware: through lw71.tl2.p233
- Lexmark Ms317 Firmware: through lw71.prl.p233
- Lexmark Ms410 Firmware: through lw71.prl.p233
- Lexmark Ms415 Firmware: through lw71.tl2.p233
- Lexmark Ms417 Firmware: through lw71.tl2.p233
- Lexmark Ms51X Firmware: through lw71.pr2.p233
- Lexmark Ms610Dn Firmware: through lw71.pr2.p233
References
- http://support.lexmark.com/index?page=content&id=TE923&locale=EN&userlocale=EN_US
- http://support.lexmark.com/index?page=content&id=TE923&locale=EN&userlocale=EN_US
Get alerted when CVE-2019-10059 or the next vulnerability affects your stack