CVE-2019-19772

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-06 · updated 2026-06-17
Weakness: CWE-79

Description

Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.

Affected products

Lexmark 6500E Firmware: through lhs60.jr.p735
Lexmark C734 Firmware: through lr.sk.p822
Lexmark C736 Firmware: through lr.ske.p822
Lexmark C746 Firmware: through lhs60.cm2.p731
Lexmark C748 Firmware: through lhs60.cm4.p735
Lexmark C792 Firmware: through lhs60.hc.p735
Lexmark C925 Firmware: through lhs60.hv.p735
Lexmark C950 Firmware: through lhs60.tp.p735
Lexmark Cs31X Firmware: through lw74.vyl.p267
Lexmark Cs41X Firmware: through lw74.vy2.p267
Lexmark Cs51X Firmware: through lw74.vy4.p267
Lexmark Cs748 Firmware: through lhs60.cm4.p735
Lexmark Cs796 Firmware: through lhs60.hc.p735
Lexmark Cx310 Firmware: through lw74.gm2.p267
Lexmark Cx410 Firmware: through lw74.gm4.p267
Lexmark Cx510 Firmware: through lw74.gm7.p267
Lexmark E46X Firmware: through lr.lbh.p822
Lexmark M1140 Firmware: through lw74.prl.p267
Lexmark M1145 Firmware: through lw74.pr2.p267
Lexmark M3150 Firmware: through lw74.pr4.p267
Lexmark M3150Dn Firmware: through lw74.pr2.p267
Lexmark M5155 Firmware: through lw74.dn4.p267
Lexmark M5163 Firmware: through lw74.dn4.p267
Lexmark M5163Dn Firmware: through lw74.dn2.p267
Lexmark M5170 Firmware: through lw74.dn7.p267
Lexmark Ms310 Firmware: through lw74.prl.p267
Lexmark Ms312 Firmware: through lw74.prl.p267
Lexmark Ms315 Firmware: through lw74.tl2.p267
Lexmark Ms317 Firmware: through lw74.prl.p267
Lexmark Ms410 Firmware: through lw74.prl.p267

References

Get alerted when CVE-2019-19772 or the next vulnerability affects your stack