CVE:CVE-2018-15520
CNNVD:CNNVD-201906-1100
Lexmark CX82x等都是美国利盟（Lexmark）公司的一款多功能打印机。
多款Lexmark产品中存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：Lexmark CX82x CXTPP.052.024及之前版本，052.200版本至052.204版本；CX860 CXTPP.052.024及之前版本，052.200版本至052.204版本；XC6152 CXTPP.052.024及之前版本，052.200版本至052.204版本；XC8155 CXTPP.052.024及之前版本，052.200版本至052.204版本；XC8160 CXTPP.052.024及之前版本，052.200版本至052.204版本；CX72x CXTAT.052.024及之前版本，052.200版本至052.204版本；XC41x0 CXTAT.052.024及之前版本，052.200版本至052.204版本；CX92x等。
solution:Upgrade lexmark cx82x_firmware to a higher version than cxtpp.052.024,cxtpp.052.204,and avoid the version (,cxtpp.052.024],[cxtpp.052.200,cxtpp.052.204]; Upgrade lexmark cx860_firmware to a higher version than cxtpp.052.024,cxtpp.052.204,and avoid the version (,cxtpp.052.024],[cxtpp.052.200,cxtpp.052.204]; Upgrade lexmark xc6152_firmware to a higher version than cxtpp.052.024,cxtpp.052.204,and avoid the version (,cxtpp.052.024],[cxtpp.052.200,cxtpp.052.204]; Upgrade lexmark xc8155_firmware to a higher version than cxtpp.052.024,cxtpp.052.204,and avoid the version (,cxtpp.052.024],[cxtpp.052.200,cxtpp.052.204]; Upgrade lexmark xc8160_firmware to a higher version than cxtpp.052.024,cxtpp.052.204,and avoid the version (,cxtpp.052.024],[cxtpp.052.200,cxtpp.052.204]; Upgrade lexmark cx72x_firmware to a higher version than cxtat.052.024,cxtat.052.204,and avoid the version (,cxtat.052.024],[cxtat.052.200,cxtat.052.204]; Upgrade lexmark xc41x0_firmware to a higher version than cxtat.052.024,cxtat.052.204,and avoid the version (,cxtat.052.024],[cxtat.052.200,cxtat.052.204]; Upgrade lexmark cx92x_firmware to a higher version than cxtmh.052.024,cxtmh.052.204,and avoid the version (,cxtmh.052.024],[cxtmh.052.200,cxtmh.052.204]; Upgrade lexmark xc92x5_firmware to a higher version than cxtmh.052.024,cxtmh.052.204,and avoid the version (,cxtmh.052.024],[cxtmh.052.200,cxtmh.052.204]; Upgrade lexmark mx321_firmware to a higher version than mxngm.052.024,mxngm.052.204,and avoid the version (,mxngm.052.024],[mxngm.052.200,mxngm.052.204]; Upgrade lexmark mb2338_firmware to a higher version than mxngm.052.024,mxngm.052.204,and avoid the version (,mxngm.052.024],[mxngm.052.200,mxngm.052.204]; Upgrade lexmark mx42x_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark mx52x_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark mx622_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark mb2442_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark mb2546_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark mb2650_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark xm124x_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark xm3250_firmware to a higher version than mxtgm.052.024,mxtgm.052.204,and avoid the version (,mxtgm.052.024],[mxtgm.052.200,mxtgm.052.204]; Upgrade lexmark mx72x_firmware to a higher version than mxtgw.052.024,mxtgw.052.204,and avoid the version (,mxtgw.052.024],[mxtgw.052.200,mxtgw.052.204]; Upgrade lexmark mx82x_firmware to a higher version than mxtgw.052.024,mxtgw.052.204,and avoid the version (,mxtgw.052.024],[mxtgw.052.200,mxtgw.052.204]; Upgrade lexmark mb2770_firmware to a higher version than mxtgw.052.024,mxtgw.052.204,and avoid the version (,mxtgw.052.024],[mxtgw.052.200,mxtgw.052.204]; Upgrade lexmark xm5370_firmware to a higher version than mxtgw.052.024,mxtgw.052.204,and avoid the version (,mxtgw.052.024],[mxtgw.052.200,mxtgw.052.204]; Upgrade lexmark xm7355_firmware to a higher version than mxtgw.052.024,mxtgw.052.204,and avoid the version (,mxtgw.052.024],[mxtgw.052.200,mxtgw.052.204]; Upgrade lexmark xm7370_firmware to a higher version than mxtgw.052.024,mxtgw.052.204,and avoid the version (,mxtgw.052.024],[mxtgw.052.200,mxtgw.052.204]; Upgrade lexmark cx421_firmware to a higher version than cxnzj.052.024,cxnzj.052.204,and avoid the version (,cxnzj.052.024],[cxnzj.052.200,cxnzj.052.204]; Upgrade lexmark mc2325_firmware to a higher version than cxnzj.052.024,cxnzj.052.204,and avoid the version (,cxnzj.052.024],[cxnzj.052.200,cxnzj.052.204]; Upgrade lexmark mc2425_firmware to a higher version than cxnzj.052.024,cxnzj.052.204,and avoid the version (,cxnzj.052.024],[cxnzj.052.200,cxnzj.052.204]; Upgrade lexmark cx522_firmware to a higher version than cxtzj.052.024,cxtzj.052.204,and avoid the version (,cxtzj.052.024],[cxtzj.052.200,cxtzj.052.204]; Upgrade lexmark cx62x_firmware to a higher version than cxtzj.052.024,cxtzj.052.204,and avoid the version (,cxtzj.052.024],[cxtzj.052.200,cxtzj.052.204]; Upgrade lexmark mc2535_firmware to a higher version than cxtzj.052.024,cxtzj.052.204,and avoid the version (,cxtzj.052.024],[cxtzj.052.200,cxtzj.052.204]; Upgrade lexmark mc2640_firmware to a higher version than cxtzj.052.024,cxtzj.052.204,and avoid the version (,cxtzj.052.024],[cxtzj.052.200,cxtzj.052.204]; Upgrade lexmark xc2235_firmware to a higher version than cxtzj.052.024,cxtzj.052.204,and avoid the version (,cxtzj.052.024],[cxtzj.052.200,cxtzj.052.204]; Upgrade lexmark xc4240_firmware to a higher version than cxtzj.052.024,cxtzj.052.204,and avoid the version (,cxtzj.052.024],[cxtzj.052.200,cxtzj.052.204]