What is the CVSS score of CVE-2019-6489?

CVE-2019-6489 has a CVSS 3.0 base score of 5.3 (Medium). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.9%.

Xm5163 Firmware CVE-2019-6489

MEDIUM

2019-02-11 cve@mitre.org

Information Disclosure Xm5163 Firmware Xm5170 Firmware Xm7155 Firmware Xm7163 Firmware Xm7170 Firmware Xm7155X Firmware Xm7163X Firmware Xm7170X Firmware Cx310 Firmware Cx410 Firmware Cx510 Firmware Xc2132 Firmware Mx31X Firmware Mx410 Firmware Mx510 Firmware Mx511 Firmware Xm1145 Firmware Mx610 Firmware Mx611 Firmware Xm3150 Firmware Mx71X Firmware Mx81X Firmware Mx91X Firmware Xm91X Firmware Mx6500E Firmware X548 Firmware Xs548 Firmware X74X Firmware Xs748 Firmware X792 Firmware Xs79X Firmware X925 Firmware Xs925 Firmware X95X Firmware Xs95X Firmware 6500E Firmware X46X Firmware X65X Firmware X73X Firmware X86X Firmware

5.3

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Feb 11, 2019 - 21:29 nvd

MEDIUM 5.3

DescriptionNVD

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.

AnalysisAI

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts. Affected products include: Lexmark Xm5163 Firmware, Lexmark Xm5170 Firmware, Lexmark Xm7155 Firmware, Lexmark Xm7163 Firmware, Lexmark Xm7170 Firmware. Version information: before 2019.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.