CVE-2018-15520
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
- Record
CVE-2018-15520- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
- Record
CVE-2018-15520- Updated
- 2026-11-02
EUVDEUVD-2018-7397 No score
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
- Record
EUVD-2018-7397- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jx8x-49cm-p262
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
- Record
GHSA-jx8x-49cm-p262- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
- lexmark cx421 firmware
- lexmark cx522 firmware
- lexmark cx62x firmware
- lexmark cx72x firmware
- lexmark cx82x firmware
- lexmark cx860 firmware
- lexmark cx92x firmware
- lexmark mb2338 firmware
- lexmark mb2442 firmware
- lexmark mb2546 firmware
- lexmark mb2650 firmware
- lexmark mb2770 firmware
Show 22 moreShow less
- lexmark mc2325 firmware
- lexmark mc2425 firmware
- lexmark mc2535 firmware
- lexmark mc2640 firmware
- lexmark mx321 firmware
- lexmark mx42x firmware
- lexmark mx52x firmware
- lexmark mx622 firmware
- lexmark mx72x firmware
- lexmark mx82x firmware
- lexmark xc2235 firmware
- lexmark xc41x0 firmware
- lexmark xc4240 firmware
- lexmark xc6152 firmware
- lexmark xc8155 firmware
- lexmark xc8160 firmware
- lexmark xc92x5 firmware
- lexmark xm124x firmware
- lexmark xm3250 firmware
- lexmark xm5370 firmware
- lexmark xm7355 firmware
- lexmark xm7370 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-15520 is a critical vulnerability (CVSS 9.8) in Lexmark Cx421 Firmware, published June 28, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.20%, the 68th percentile. No source names a fixed version.