← Vulnerability feed

Vulnerability record · CVE-2019-6489 · published 11 February 2019

CVE-2019-6489: Lexmark xm5163 firmware vulnerability

Lexmark · Xm5163 Firmware

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.

5.3 CVSS 3.0 Medium EPSS 0.94% · top 40.3%
5.3CVSS 3.0 base score, v2 6.4
0.94%EPSS exploitation probability, 30 days
NoNot in CISA KEV
40Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

40 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://support.lexmark.com/index?page=content&id=TE912 Vendor Advisory
http://support.lexmark.com/index?page=content&id=TE912 Vendor Advisory

Track CVE-2019-6489 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-9933Lexmark cs31x firmware memory buffer overflow vulnerabilityVarious Lexmark products have a Buffer Overflow (issue 3 of 3).EPSS 1.5%9.8CVE-2019-9932Lexmark cs31x firmware memory buffer overflow vulnerabilityVarious Lexmark products have a Buffer Overflow (issue 2 of 3).EPSS 1.5%9.8CVE-2019-9930Lexmark cs31x firmware integer overflow vulnerabilityVarious Lexmark products have an Integer Overflow.EPSS 1.5%9.8CVE-2018-15519Lexmark cx310 firmware memory buffer overflow vulnerabilityVarious Lexmark devices have a Buffer Overflow (issue 1 of 2).EPSS 1.2%9.1CVE-2019-10058Lexmark cs31x firmware vulnerabilityVarious Lexmark products have Incorrect Access Control.EPSS 1.1%7.5CVE-2023-40239Lexmark c2132 firmware xml external entity (xxe) vulnerabilityCertain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.…EPSS 0.54%7.5CVE-2018-18894Lexmark 6500e firmware path traversal vulnerabilityCertain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.EPSS 1.7%7.5CVE-2011-3269Lexmark x950 firmware information exposure vulnerabilityLexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Sca…EPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2019-6489), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.