CVE-2019-9934

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

5.3 Medium

CVE-2019-9934 is a medium vulnerability (CVSS 5.3) in Lexmark Cs31x Firmware, published August 28, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. No source names a fixed version.

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: None

Exploit likelihood

0.83%Up 0.4 points since Apr 14, 2021

What each source reports

NVD Score used 5.3

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

Record: CVE-2019-9934
CVSS 3.0: 5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-306
Updated: 2026-11-02

CVE List No score

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

Record: CVE-2019-9934
Updated: 2026-11-02

EUVDEUVD-2019-19289 No score

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

Record: EUVD-2019-19289
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fw3v-q2x5-3q3q 5.3

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

Various Lexmark products have Incorrect Access Control (issue 1 of 2).

Record: GHSA-fw3v-q2x5-3q3q
CVSS 3.0: 5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness: CWE-306
Updated: 2026-11-02

Affected products

Show 13 moreShow less

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

Attack profile

How easy it is to exploit

What an attacker can affect

Exploit likelihood

What each source reports

Affected products

History

References