Skip to main content

M1145 Firmware

19 CVEs product

Monthly

CVE-2018-10662 Jun 26, 18:29 CRITICAL POC THREAT Emergency

An issue was discovered in multiple models of Axis IP Cameras. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Axis P1354 Firmware M1033 W Firmware A1001 Firmware +387
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
79.8%
CVE-2018-10661 Jun 26, 18:29 CRITICAL POC THREAT Emergency

An issue was discovered in multiple models of Axis IP Cameras. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Axis P1354 Firmware M1033 W Firmware A1001 Firmware +387
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
86.7%
CVE-2018-10660 Jun 26, 18:29 CRITICAL POC THREAT Emergency

An issue was discovered in multiple models of Axis IP Cameras. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Axis P1354 Firmware M1033 W Firmware A1001 Firmware +387
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
82.2%
CVE-2023-40239 Sep 01, 11:15 HIGH This Week

Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure XXE M1145 Firmware Xm5163 Firmware Xm5170 Firmware +79
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2020-10094 Apr 28, 14:15 MEDIUM This Month

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS M1145 Firmware Cx310 Firmware Cx410 Firmware Cx510 Firmware +77
NVD
CVSS 3.1
5.4
EPSS
0.7%
CVE-2020-10093 Apr 28, 14:15 MEDIUM This Month

A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS M1145 Firmware Cx310 Firmware Cx410 Firmware Cx510 Firmware +77
NVD
CVSS 3.1
5.4
EPSS
0.7%
CVE-2019-9933 Aug 28, 22:15 CRITICAL Act Now

Various Lexmark products have a Buffer Overflow (issue 3 of 3). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow M1145 Firmware Cx310 Firmware Mx31X Firmware Mx410 Firmware +68
NVD
CVSS 3.0
9.8
EPSS
1.5%
CVE-2019-9932 Aug 28, 22:15 CRITICAL Act Now

Various Lexmark products have a Buffer Overflow (issue 2 of 3). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow M1145 Firmware Cx310 Firmware Mx31X Firmware Mx410 Firmware +68
NVD
CVSS 3.0
9.8
EPSS
1.5%
CVE-2019-9931 Aug 28, 22:15 HIGH This Week

Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service M1145 Firmware Cx310 Firmware Mx31X Firmware Mx410 Firmware +68
NVD
CVSS 3.0
7.5
EPSS
1.1%
CVE-2019-9930 Aug 28, 22:15 CRITICAL Act Now

Various Lexmark products have an Integer Overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow M1145 Firmware Cx310 Firmware Mx31X Firmware +69
NVD
CVSS 3.0
9.8
EPSS
1.5%
CVE-2019-10059 Aug 28, 22:15 MEDIUM This Month

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure M1145 Firmware Cx310 Firmware Mx31X Firmware Mx410 Firmware +68
NVD
CVSS 3.0
5.3
EPSS
0.9%
CVE-2019-10057 Aug 28, 22:15 MEDIUM This Month

Various Lexmark products have CSRF. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF M1145 Firmware Cx310 Firmware Mx31X Firmware Cs31X Firmware +22
NVD
CVSS 3.0
6.5
EPSS
0.4%
CVE-2019-9935 Aug 28, 16:15 MEDIUM This Month

Various Lexmark products have Incorrect Access Control (issue 2 of 2). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass M1145 Firmware Cx310 Firmware Mx31X Firmware Cs31X Firmware +22
NVD
CVSS 3.0
5.3
EPSS
0.8%
CVE-2019-9934 Aug 28, 16:15 MEDIUM This Month

Various Lexmark products have Incorrect Access Control (issue 1 of 2). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass M1145 Firmware Cx310 Firmware Mx31X Firmware Cs31X Firmware +22
NVD
CVSS 3.0
5.3
EPSS
0.8%
CVE-2019-10058 Aug 28, 16:15 CRITICAL Act Now

Various Lexmark products have Incorrect Access Control. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure M1145 Firmware Cx310 Firmware Mx31X Firmware Mx410 Firmware +71
NVD
CVSS 3.0
9.1
EPSS
1.1%
CVE-2018-10664 Jun 26, 18:29 HIGH POC This Week

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Axis P1354 Firmware M1033 W Firmware A1001 Firmware +387
NVD
CVSS 3.0
7.5
EPSS
1.5%
CVE-2018-10663 Jun 26, 18:29 HIGH POC This Week

An issue was discovered in multiple models of Axis IP Cameras. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Axis P1354 Firmware M1033 W Firmware A1001 Firmware +387
NVD
CVSS 3.0
7.5
EPSS
1.5%
CVE-2018-10659 Jun 26, 18:29 HIGH POC This Week

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Axis P1354 Firmware M1033 W Firmware +388
NVD
CVSS 3.0
7.5
EPSS
1.8%
CVE-2018-10658 Jun 26, 18:29 HIGH POC This Week

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Axis P1354 Firmware M1033 W Firmware +388
NVD
CVSS 3.0
7.5
EPSS
1.5%
EPSS 80% CVSS 9.8
CRITICAL POC THREAT Emergency

An issue was discovered in multiple models of Axis IP Cameras. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Axis P1354 Firmware +389
NVD Exploit-DB
EPSS 87% CVSS 9.8
CRITICAL POC THREAT Emergency

An issue was discovered in multiple models of Axis IP Cameras. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Axis P1354 Firmware +389
NVD Exploit-DB
EPSS 82% CVSS 9.8
CRITICAL POC THREAT Emergency

An issue was discovered in multiple models of Axis IP Cameras. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Axis P1354 Firmware +389
NVD Exploit-DB
EPSS 0% CVSS 7.5
HIGH This Week

Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure XXE M1145 Firmware +81
NVD
EPSS 1% CVSS 5.4
MEDIUM This Month

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS M1145 Firmware Cx310 Firmware +79
NVD
EPSS 1% CVSS 5.4
MEDIUM This Month

A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS M1145 Firmware Cx310 Firmware +79
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Various Lexmark products have a Buffer Overflow (issue 3 of 3). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow M1145 Firmware Cx310 Firmware +70
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Various Lexmark products have a Buffer Overflow (issue 2 of 3). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow M1145 Firmware Cx310 Firmware +70
NVD
EPSS 1% CVSS 7.5
HIGH This Week

Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service M1145 Firmware Cx310 Firmware +70
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Various Lexmark products have an Integer Overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow M1145 Firmware +71
NVD
EPSS 1% CVSS 5.3
MEDIUM This Month

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure M1145 Firmware Cx310 Firmware +70
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Various Lexmark products have CSRF. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF M1145 Firmware Cx310 Firmware +24
NVD
EPSS 1% CVSS 5.3
MEDIUM This Month

Various Lexmark products have Incorrect Access Control (issue 2 of 2). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass M1145 Firmware Cx310 Firmware +24
NVD
EPSS 1% CVSS 5.3
MEDIUM This Month

Various Lexmark products have Incorrect Access Control (issue 1 of 2). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass M1145 Firmware Cx310 Firmware +24
NVD
EPSS 1% CVSS 9.1
CRITICAL Act Now

Various Lexmark products have Incorrect Access Control. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure M1145 Firmware Cx310 Firmware +73
NVD
EPSS 2% CVSS 7.5
HIGH POC This Week

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Axis P1354 Firmware +389
NVD
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue was discovered in multiple models of Axis IP Cameras. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Axis P1354 Firmware +389
NVD
EPSS 2% CVSS 7.5
HIGH POC This Week

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Axis +390
NVD
EPSS 2% CVSS 7.5
HIGH POC This Week

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Axis +390
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy