What is the CVSS score of CVE-2019-10058?

CVE-2019-10058 has a CVSS 3.0 base score of 9.1 (Critical). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 1.1%.

Cs31X Firmware CVE-2019-10058

CRITICAL

2019-08-28 cve@mitre.org

Information Disclosure Cs31X Firmware Cs41X Firmware Cx310 Firmware Ms310 Firmware Ms312 Firmware Ms317 Firmware Ms410 Firmware M1140 Firmware Ms315 Firmware Ms415 Firmware Ms417 Firmware Ms51X Firmware Ms610Dn Firmware Ms617 Firmware M1145 Firmware M3150Dn Firmware Ms71X Firmware M5163Dn Firmware Ms810 Firmware Ms811 Firmware Ms812 Firmware Ms817 Firmware Ms818 Firmware Ms810De Firmware M5155 Firmware M5163 Firmware Ms812De Firmware M5170 Firmware Ms91X Firmware Mx31X Firmware Xm1135 Firmware Mx410 Firmware Mx510 Firmware Mx511 Firmware Mx610 Firmware Mx611 Firmware Xm3150 Firmware Mx71X Firmware Mx81X Firmware Xm51Xx Firmware Xm71Xx Firmware Mx91X Firmware Xm91X Firmware Mx6500E Firmware C746 Firmware C748 Firmware Cs748 Firmware C792 Firmware Cs796 Firmware C925 Firmware C950 Firmware X548 Firmware Xs548 Firmware X74X Firmware Xs748 Firmware X792 Firmware Xs79X Firmware X925 Firmware Xs925 Firmware X95X Firmware Xs95X Firmware 6500E Firmware C734 Firmware C736 Firmware E46X Firmware T65X Firmware X46X Firmware X65X Firmware X73X Firmware W850 Firmware X86X Firmware Cs51X Firmware Ms610De Firmware M3150 Firmware

9.1

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Aug 28, 2019 - 16:15 nvd

CRITICAL 9.1

DescriptionNVD

Various Lexmark products have Incorrect Access Control.

AnalysisAI

Various Lexmark products have Incorrect Access Control. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

Affected products include: Lexmark Cs31X Firmware, Lexmark Cs41X Firmware, Lexmark Cx310 Firmware, Lexmark Ms310 Firmware, Lexmark Ms312 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.