What’s Vulnerable › Vulnerabilities

CVE-2019-16758

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-11-21 · updated 2026-06-17
• Weakness: CWE-22

Description

In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system.

Affected products

• Lexmark Services Monitor Firmware: 2.27.4.0.39

References

• http://packetstormsecurity.com/files/155365/Lexmark-Services-Monitor-2.27.4.0.39-Directory-Traversal.html
• http://seclists.org/fulldisclosure/2019/Nov/17
• http://support.lexmark.com/index?page=content&id=TE930&locale=en&userlocale=EN_US
• https://www.symantec.com/security-center/vulnerabilities/writeup/110943
• http://packetstormsecurity.com/files/155365/Lexmark-Services-Monitor-2.27.4.0.39-Directory-Traversal.html
• http://seclists.org/fulldisclosure/2019/Nov/17
• http://support.lexmark.com/index?page=content&id=TE930&locale=en&userlocale=EN_US
• https://www.symantec.com/security-center/vulnerabilities/writeup/110943

Get alerted when CVE-2019-16758 or the next vulnerability affects your stack