Lexmark Printer 跨站点脚本漏洞
CVE编号
CVE-2020-10094利用情况
暂无补丁情况
N/A披露时间
2020-04-29漏洞描述
<samp><small>Lexmark CS31x等都是美国利盟（Lexmark）公司的一款打印机。 多款Lexmark产品中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：Lexmark CS31x LW74.VYL.P273之前版本；LW74.VY4.P273之前的CS51x； LW74.GM2.P273之前的CX310； LW74.GM4.P273之前的CX410和XC2130； LW74.GM7.P273之前的CX510和XC2132； LW74.PRL.P273之前的MS310，MS312，MS317； LW74.PRL.P273之前的MS410，M1140； LW74.TL2.P273之前的MS315，MS415，MS417; LW74.PR2.P273之前的MS51x，MS610dn，MS617； LW74.PR2.P273之前的M1145，M3150dn； MS610de，LW74.PR4.P273之前的M3150； LW74.DN2.P273之前的MS71x，M5163dn; LW74.DN2.P273之前的MS810，MS811，MS812，MS817，MS818； LW74.DN4.P273之前的MS810de，M5155，M5163； MS812de，LW74.DN7.P273之前的M5170； LW74.SA.P273之前的MS91x； MX31x，LW74.SB2.P273之前的XM1135； LW74.SB4.P273之前的MX410，MX510和MX511； XM1140，LM74.SB4.P273之前的XM1145； LW74.SB7.P273之前的MX610和MX611; LW74.SB7.P273之前的XM3150； LW74.TU.P273之前的MX71x，MX81x； LW74.TU.P273之前的XM51xx和XM71xx； LW74.MG.P273之前的MX91x和XM91x； LW74.JD.P273之前的MX6500e; LHS60.CM2.P738之前的C746； C748，CS748，之前为LHS60.CM4.P738； L79260.HC.P738之前的C792，CS796； LHS60.HV.P738之前的C925; LHS60.TP.P738之前的C950； LHS60.VK.P738之前的X548和XS548； LHS60.NY.P738之前的X74x和XS748； LHS60.MR.P738之前的X792和XS79x； LHS60.HK.P738之前的X925和XS925； LHS60.TQ.P738之前的X95x和XS95x； LHS60.JR.P738; C734 LR.SK.P824及更早版本之前的6500e; C736 LR.SKE.P824及更早版本； E46x LR.LBH.P824及更早版本； T65x LR.JP.P824及更早版本； X46x LR.BS.P824及更早版本； X65x LR.MN.P824及更早版本； X73x LR.FL.P824及更早版本； W850 LP.JB.P823及更早版本；和X86x LP.SP.P823及更早版本。</small></samp>解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| http://support.lexmark.com/index?page=content&id=TE936 |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | lexmark | 6500e_firmware | * | Up to (including) lhs60.jr.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c734_firmware | * | Up to (including) lr.sk.p824 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c736_firmware | * | Up to (including) lr.ske.p824 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c746_firmware | * | Up to (including) lhs60.cm2.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c748_firmware | * | Up to (including) lhs60.cm4.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c792_firmware | * | Up to (including) lhs60.hc.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c925_firmware | * | Up to (including) lhs60.hv.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | c950_firmware | * | Up to (including) lhs60.tp.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs31x_firmware | * | Up to (including) lw74.vyl.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs41x_firmware | * | Up to (including) lw74.vy2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs51x_firmware | * | Up to (including) lw74.vy4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs748_firmware | * | Up to (including) lhs60.cm4.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cs796_firmware | * | Up to (including) lhs60.hc.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx310_firmware | * | Up to (including) lw74.gm2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx410_firmware | * | Up to (including) lw74.gm4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | cx510_firmware | * | Up to (including) lw74.gm7.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | e46x_firmware | * | Up to (including) lr.lbh.p824 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m1140_firmware | * | Up to (including) lw74.prl.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m1145_firmware | * | Up to (including) lw74.pr2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m3150dn_firmware | * | Up to (including) lw74.pr2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m3150_firmware | * | Up to (including) lw74.pr4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5155_firmware | * | Up to (including) lw74.dn4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5163dn_firmware | * | Up to (including) lw74.dn2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5163_firmware | * | Up to (including) lw74.dn4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | m5170_firmware | * | Up to (including) lw74.dn7.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms310_firmware | * | Up to (including) lw74.prl.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms312_firmware | * | Up to (including) lw74.prl.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms315_firmware | * | Up to (including) lw74.tl2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms317_firmware | * | Up to (including) lw74.prl.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms410_firmware | * | Up to (including) lw74.prl.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms415_firmware | * | Up to (including) lw74.tl2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms417_firmware | * | Up to (including) lw74.tl2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms51x_firmware | * | Up to (including) lw74.pr2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms610de_firmware | * | Up to (including) lw74.pr4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms610dn_firmware | * | Up to (including) lw74.pr2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms617_firmware | * | Up to (including) lw74.pr2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms71x_firmware | * | Up to (including) lw74.dn2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms810de_firmware | * | Up to (including) lw74.dn4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms810_firmware | * | Up to (including) lw74.dn2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms811_firmware | * | Up to (including) lw74.dn2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms812de_firmware | * | Up to (including) lw74.dn7.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms812_firmware | * | Up to (including) lw74.dn2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms817_firmware | * | Up to (including) lw74.dn2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms818_firmware | * | Up to (including) lw74.dn2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | ms91x_firmware | * | Up to (including) lw74.sa.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx31x_firmware | * | Up to (including) lw74.sb2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx410_firmware | * | Up to (including) lw74.sb4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx510_firmware | * | Up to (including) lw74.sb4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx511_firmware | * | Up to (including) lw74.sb4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx610_firmware | * | Up to (including) lw74.sb7.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx611_firmware | * | Up to (including) lw74.sb7.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx6500e_firmware | * | Up to (including) lw74.jd.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx71x_firmware | * | Up to (including) lw74.tu.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx81x_firmware | * | Up to (including) lw74.tu.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | mx91x_firmware | * | Up to (including) lw74.mg.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | t65x_firmware | * | Up to (including) lr.jp.p824 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | w850_firmware | * | Up to (including) lp.jb.p823 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x46x_firmware | * | Up to (including) lr.bs.p824 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x548_firmware | * | Up to (including) lhs60.vk.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x65x_firmware | * | Up to (including) lr.mn.p824 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x73x_firmware | * | Up to (including) lr.fl.p824 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x74x_firmware | * | Up to (including) lhs60.ny.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x792_firmware | * | Up to (including) lhs60.mr.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x86x_firmware | * | Up to (including) lp.sp.p823 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x925_firmware | * | Up to (including) lhs60.hk.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | x95x_firmware | * | Up to (including) lhs60.tq.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xc2130_firmware | * | Up to (including) lw74.gm4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xc2132_firmware | * | Up to (including) lw74.gm7.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1135_firmware | * | Up to (including) lw74.sb2.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1140_firmware | * | Up to (including) lw74.sb4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm1145_firmware | * | Up to (including) lw74.sb4.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm3150_firmware | * | Up to (including) lw74.sb7.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm51xx_firmware | * | Up to (including) lw74.tu.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm71xx_firmware | * | Up to (including) lw74.tu.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xm91x_firmware | * | Up to (including) lw74.mg.p272 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs548_firmware | * | Up to (including) lhs60.vk.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs748_firmware | * | Up to (including) lhs60.ny.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs79x_firmware | * | Up to (including) lhs60.mr.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs925_firmware | * | Up to (including) lhs60.hk.p737 | |||||
| 运行在以下环境 | |||||||||
| 系统 | lexmark | xs95x_firmware | * | Up to (including) lhs60.tq.p737 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | 6500e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c734 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c736 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c746 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c792 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | c950 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs31x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs41x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs51x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cs796 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx310 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | cx510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | e46x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m1140 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m1145 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m3150 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m3150dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5155 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5163 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5163dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | m5170 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms310 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms312 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms315 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms317 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms415 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms417 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms51x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms610de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms610dn | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms617 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms71x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms810 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms810de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms811 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms812 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms812de | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms817 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms818 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | ms91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx31x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx410 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx511 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx610 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx611 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx6500e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx71x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx81x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | mx91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | t65x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | w850 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x46x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x548 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x65x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x73x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x74x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x792 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x86x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | x95x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xc2130 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xc2132 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1135 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1140 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm1145 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm3150 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm51xx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm71xx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xm91x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs548 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs748 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs79x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs925 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | lexmark | xs95x | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 低
- 影响范围 已更改
- 用户交互 需要
- 可用性 无
- 保密性 低
- 完整性 低
| CWE-ID | 漏洞类型 |
| CWE-79 | 在Web页面生成时对输入的转义处理不恰当（跨站脚本） |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论