CVE-2019-18791

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-13 · updated 2026-06-17
Weakness: CWE-79

Description

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.

Affected products

Lexmark 6500E Firmware: through lhs60.jr.p731
Lexmark C734 Firmware: through lr.sk.p822
Lexmark C736 Firmware: through lr.ske.p822
Lexmark C746 Firmware: through lhs60.cm2.p731
Lexmark C748 Firmware: through lhs60.cm4.p731
Lexmark C792 Firmware: through lhs60.hc.p731
Lexmark C925 Firmware: through lhs60.hv.p731
Lexmark C950 Firmware: through lhs60.tp.p731
Lexmark Cs748 Firmware: through lhs60.cm4.p731
Lexmark Cs796 Firmware: through lhs60.hc.p731
Lexmark Cx310 Firmware: through lw73.gm2.p263
Lexmark Cx31X Firmware: through lw73.vyl.p263
Lexmark Cx410 Firmware: through lw73.gm4.p263
Lexmark Cx41X Firmware: through lw73.vy2.p263
Lexmark Cx510 Firmware: through lw73.gm7.p263
Lexmark Cx51X Firmware: through lw73.vy4.p263
Lexmark E46X Firmware: through lr.lbh.p822
Lexmark M1140 Firmware: through lw73.prl.p263
Lexmark M1145 Firmware: through lw73.pr2.p263
Lexmark M3150 Firmware: through lw73.pr4.p263
Lexmark M3150Dn Firmware: through lw73.pr2.p263
Lexmark M5155 Firmware: through lw73.dn4.p263
Lexmark M5163 Firmware: through lw73.dn4.p263
Lexmark M5163Dn Firmware: through lw73.dn2.p263
Lexmark M5170 Firmware: through lw73.dn7.p263
Lexmark Ms310 Firmware: through lw73.prl.p263
Lexmark Ms312 Firmware: through lw73.prl.p263
Lexmark Ms315 Firmware: through lw73.tl2.p263
Lexmark Ms317 Firmware: through lw73.prl.p263
Lexmark Ms410 Firmware: through lw73.prl.p263

References

Get alerted when CVE-2019-18791 or the next vulnerability affects your stack