CVE-2019-10059
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
- Record
CVE-2019-10059- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-254
- Updated
- 2026-11-02
CVE List No score
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
- Record
CVE-2019-10059- Updated
- 2026-11-02
EUVDEUVD-2019-2122 No score
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
- Record
EUVD-2019-2122- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5rrg-rq5w-673j
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
- Record
GHSA-5rrg-rq5w-673j- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Affected products
- lexmark 6500e firmware
- lexmark c734 firmware
- lexmark c736 firmware
- lexmark c746 firmware
- lexmark c748 firmware
- lexmark c792 firmware
- lexmark c925 firmware
- lexmark c950 firmware
- lexmark cs31x firmware
- lexmark cs41x firmware
- lexmark cs748 firmware
- lexmark cs796 firmware
Show 59 moreShow less
- lexmark cx310 firmware
- lexmark e46x firmware
- lexmark m1140 firmware
- lexmark m1145 firmware
- lexmark m3150dn firmware
- lexmark m5155 firmware
- lexmark m5163 firmware
- lexmark m5163dn firmware
- lexmark m5170 firmware
- lexmark ms310 firmware
- lexmark ms312 firmware
- lexmark ms315 firmware
- lexmark ms317 firmware
- lexmark ms410 firmware
- lexmark ms415 firmware
- lexmark ms417 firmware
- lexmark ms51x firmware
- lexmark ms610dn firmware
- lexmark ms617 firmware
- lexmark ms71x firmware
- lexmark ms810 firmware
- lexmark ms810de firmware
- lexmark ms811 firmware
- lexmark ms812 firmware
- lexmark ms812de firmware
- lexmark ms817 firmware
- lexmark ms818 firmware
- lexmark ms91x firmware
- lexmark mx31x firmware
- lexmark mx410 firmware
- lexmark mx510 firmware
- lexmark mx511 firmware
- lexmark mx610 firmware
- lexmark mx611 firmware
- lexmark mx6500e firmware
- lexmark mx71x firmware
- lexmark mx81x firmware
- lexmark mx91x firmware
- lexmark t65x firmware
- lexmark w850 firmware
- lexmark x46x firmware
- lexmark x548 firmware
- lexmark x65x firmware
- lexmark x73x firmware
- lexmark x74x firmware
- lexmark x792 firmware
- lexmark x86x firmware
- lexmark x925 firmware
- lexmark x95x firmware
- lexmark xm1135 firmware
- lexmark xm3150 firmware
- lexmark xm51xx firmware
- lexmark xm71xx firmware
- lexmark xm91x firmware
- lexmark xs548 firmware
- lexmark xs748 firmware
- lexmark xs79x firmware
- lexmark xs925 firmware
- lexmark xs95x firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-10059 is a medium vulnerability (CVSS 5.3) in Lexmark 6500e Firmware, published August 28, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 59th percentile. No source names a fixed version.