CVE:CVE-2020-10094
CNNVD:CNNVD-202004-2246
Lexmark CS31x等都是美国利盟（Lexmark）公司的一款打印机。
多款Lexmark产品中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：Lexmark CS31x LW74.VYL.P273之前版本；CS41x LW74.VY2.P273之前版本；CS51x LW74.VY4.P273之前版本；CX310 LW74.GM2.P273之前版本；CX410 LW74.GM4.P273之前版本；XC2130 LW74.GM4.P273之前版本；CX510 LW74.GM7.P273之前版本；XC2132 LW74.GM7.P273之前版本；MS310 LW74.PRL.P273之前版本；MS312 LW74.PRL.P273之前版本；MS317 LW74.PRL.P273之前版本；MS410 LW74.PRL.P273之前版本；M1140 LW74.PRL.P273之前版本；MS315 LW74.TL2.P273之前版本；MS415 LW74.TL2.P273之前版本；MS417 LW74.TL2.P273之前版本；MS51x LW74.PR2.P273之前版本；MS610dn LW74.PR2.P273之前版本；MS617 LW74.PR2.P273之前版本；M1145 LW74.PR2.P273之前版本；M3150dn LW74.PR2.P273之前版本；MS610de LW74.PR4.P273之前版本；M3150 LW74.PR4.P273之前版本；MS71x LW74.DN2.P273之前版本；M5163dn LW74.DN2.P273之前版本；MS810 LW74.DN2.P273之前版本；MS811 LW74.DN2.P273之前版本；MS812 LW74.DN2.P273之前版本；MS817 LW74.DN2.P273之前版本；MS818 LW74.DN2.P273之前版本；MS810de LW74.DN4.P273之前版本；M5155 LW74.DN4.P273之前版本；M5163 LW74.DN4.P273之前版本；MS812de LW74.DN7.P273之前版本；M5170 LW74.DN7.P273之前版本；MS91x LW74.SA.P273之前版本；MX31x LW74.DN7.P273之前版本；XM1135 LW74.SB2.P273之前版本；MX410 LW74.SB4.P273之前版本；MX510 LW74.SB4.P273之前版本；MX511 LW74.SB4.P273之前版本；XM1140 LW74.SB4.P273之前版本；XM1145 LW74.SB4.P273之前版本；MX610 LW74.SB7.P273之前版本；MX611 LW74.SB7.P273之前版本；XM3150 LW74.SB7.P273之前版本；MX71x LW74.TU.P273之前版本；MX81x LW74.TU.P273之前版本；XM51xx LW74.TU.P273之前版本；XM71xx LW74.TU.P273之前版本；MX91x LW74.MG.P273之前版本；XM91x LW74.MG.P273之前版本；MX6500e LW74.JD.P273之前版本；C746 LHS60.CM2.P738之前版本；C748 LHS60.CM4.P738之前版本；CS748 LHS60.CM4.P738之前版本；C792 LHS60.HC.P738之前版本；CS796 LHS60.HC.P738之前版本；C925 LHS60.HV.P738之前版本；C950 LHS60.TP.P738之前版本；X548 LHS60.VK.P738之前版本；XS548 LHS60.VK.P738之前版本；X74x LHS60.NY.P738之前版本；XS748 LHS60.NY.P738之前版本；X792 LHS60.MR.P738之前版本；XS79x LHS60.MR.P738之前版本；X925 LHS60.HK.P738之前版本；XS925 LHS60.HK.P738之前版本；X95x LHS60.TQ.P738之前版本；XS95x LHS60.TQ.P738之前版本；6500e LHS60.JR.P738之前版本；C734 LR.SK.P824及之前版本；C736 LR.SKE.P824及之前版本；E46x LR.LBH.P824及之前版本；T65x LR.JP.P824及之前版本；X46x LR.BS.P824及之前版本；X65x LR.MN.P824及之前版本；X73x LR.FL.P824及之前版本；W850 LP.JB.P823及之前版本；X86x LP.SP.P823及之前版本。
solution:Upgrade lexmark cs31x_firmware to a higher version than lw74.vyl.p272,and avoid the version (,lw74.vyl.p272]; Upgrade lexmark cs41x_firmware to a higher version than lw74.vy2.p272,and avoid the version (,lw74.vy2.p272]; Upgrade lexmark cs51x_firmware to a higher version than lw74.vy4.p272,and avoid the version (,lw74.vy4.p272]; Upgrade lexmark cx310_firmware to a higher version than lw74.gm2.p272,and avoid the version (,lw74.gm2.p272]; Upgrade lexmark cx410_firmware to a higher version than lw74.gm4.p272,and avoid the version (,lw74.gm4.p272]; Upgrade lexmark xc2130_firmware to a higher version than lw74.gm4.p272,and avoid the version (,lw74.gm4.p272]; Upgrade lexmark cx510_firmware to a higher version than lw74.gm7.p272,and avoid the version (,lw74.gm7.p272]; Upgrade lexmark xc2132_firmware to a higher version than lw74.gm7.p272,and avoid the version (,lw74.gm7.p272]; Upgrade lexmark ms310_firmware to a higher version than lw74.prl.p272,and avoid the version (,lw74.prl.p272]; Upgrade lexmark ms312_firmware to a higher version than lw74.prl.p272,and avoid the version (,lw74.prl.p272]; Upgrade lexmark ms317_firmware to a higher version than lw74.prl.p272,and avoid the version (,lw74.prl.p272]; Upgrade lexmark ms410_firmware to a higher version than lw74.prl.p272,and avoid the version (,lw74.prl.p272]; Upgrade lexmark m1140_firmware to a higher version than lw74.prl.p272,and avoid the version (,lw74.prl.p272]; Upgrade lexmark ms315_firmware to a higher version than lw74.tl2.p272,and avoid the version (,lw74.tl2.p272]; Upgrade lexmark ms415_firmware to a higher version than lw74.tl2.p272,and avoid the version (,lw74.tl2.p272]; Upgrade lexmark ms417_firmware to a higher version than lw74.tl2.p272,and avoid the version (,lw74.tl2.p272]; Upgrade lexmark ms51x_firmware to a higher version than lw74.pr2.p272,and avoid the version (,lw74.pr2.p272]; Upgrade lexmark ms610dn_firmware to a higher version than lw74.pr2.p272,and avoid the version (,lw74.pr2.p272]; Upgrade lexmark ms617_firmware to a higher version than lw74.pr2.p272,and avoid the version (,lw74.pr2.p272]; Upgrade lexmark m1145_firmware to a higher version than lw74.pr2.p272,and avoid the version (,lw74.pr2.p272]; Upgrade lexmark m3150dn_firmware to a higher version than lw74.pr2.p272,and avoid the version (,lw74.pr2.p272]; Upgrade lexmark ms610de_firmware to a higher version than lw74.pr4.p272,and avoid the version (,lw74.pr4.p272]; Upgrade lexmark m3150_firmware to a higher version than lw74.pr4.p272,and avoid the version (,lw74.pr4.p272]; Upgrade lexmark ms71x_firmware to a higher version than lw74.dn2.p272,and avoid the version (,lw74.dn2.p272]; Upgrade lexmark m5163dn_firmware to a higher version than lw74.dn2.p272,and avoid the version (,lw74.dn2.p272]; Upgrade lexmark ms810_firmware to a higher version than lw74.dn2.p272,and avoid the version (,lw74.dn2.p272]; Upgrade lexmark ms811_firmware to a higher version than lw74.dn2.p272,and avoid the version (,lw74.dn2.p272]; Upgrade lexmark ms812_firmware to a higher version than lw74.dn2.p272,and avoid the version (,lw74.dn2.p272]; Upgrade lexmark ms817_firmware to a higher version than lw74.dn2.p272,and avoid the version (,lw74.dn2.p272]; Upgrade lexmark ms818_firmware to a higher version than lw74.dn2.p272,and avoid the version (,lw74.dn2.p272]; Upgrade lexmark ms810de_firmware to a higher version than lw74.dn4.p272,and avoid the version (,lw74.dn4.p272]; Upgrade lexmark m5155_firmware to a higher version than lw74.dn4.p272,and avoid the version (,lw74.dn4.p272]; Upgrade lexmark m5163_firmware to a higher version than lw74.dn4.p272,and avoid the version (,lw74.dn4.p272]; Upgrade lexmark ms812de_firmware to a higher version than lw74.dn7.p272,and avoid the version (,lw74.dn7.p272]; Upgrade lexmark m5170_firmware to a higher version than lw74.dn7.p272,and avoid the version (,lw74.dn7.p272]; Upgrade lexmark ms91x_firmware to a higher version than lw74.sa.p272,and avoid the version (,lw74.sa.p272]; Upgrade lexmark mx31x_firmware to a higher version than lw74.sb2.p272,and avoid the version (,lw74.sb2.p272]; Upgrade lexmark xm1135_firmware to a higher version than lw74.sb2.p272,and avoid the version (,lw74.sb2.p272]; Upgrade lexmark mx410_firmware to a higher version than lw74.sb4.p272,and avoid the version (,lw74.sb4.p272]; Upgrade lexmark mx510_firmware to a higher version than lw74.sb4.p272,and avoid the version (,lw74.sb4.p272]; Upgrade lexmark mx511_firmware to a higher version than lw74.sb4.p272,and avoid the version (,lw74.sb4.p272]; Upgrade lexmark xm1140_firmware to a higher version than lw74.sb4.p272,and avoid the version (,lw74.sb4.p272]; Upgrade lexmark xm1145_firmware to a higher version than lw74.sb4.p272,and avoid the version (,lw74.sb4.p272]; Upgrade lexmark mx610_firmware to a higher version than lw74.sb7.p272,and avoid the version (,lw74.sb7.p272]; Upgrade lexmark mx611_firmware to a higher version than lw74.sb7.p272,and avoid the version (,lw74.sb7.p272]; Upgrade lexmark xm3150_firmware to a higher version than lw74.sb7.p272,and avoid the version (,lw74.sb7.p272]; Upgrade lexmark mx71x_firmware to a higher version than lw74.tu.p272,and avoid the version (,lw74.tu.p272]; Upgrade lexmark mx81x_firmware to a higher version than lw74.tu.p272,and avoid the version (,lw74.tu.p272]; Upgrade lexmark xm51xx_firmware to a higher version than lw74.tu.p272,and avoid the version (,lw74.tu.p272]; Upgrade lexmark xm71xx_firmware to a higher version than lw74.tu.p272,and avoid the version (,lw74.tu.p272]; Upgrade lexmark mx91x_firmware to a higher version than lw74.mg.p272,and avoid the version (,lw74.mg.p272]; Upgrade lexmark xm91x_firmware to a higher version than lw74.mg.p272,and avoid the version (,lw74.mg.p272]; Upgrade lexmark mx6500e_firmware to a higher version than lw74.jd.p272,and avoid the version (,lw74.jd.p272]; Upgrade lexmark c746_firmware to a higher version than lhs60.cm2.p737,and avoid the version (,lhs60.cm2.p737]; Upgrade lexmark c748_firmware to a higher version than lhs60.cm4.p737,and avoid the version (,lhs60.cm4.p737]; Upgrade lexmark cs748_firmware to a higher version than lhs60.cm4.p737,and avoid the version (,lhs60.cm4.p737]; Upgrade lexmark c792_firmware to a higher version than lhs60.hc.p737,and avoid the version (,lhs60.hc.p737]; Upgrade lexmark cs796_firmware to a higher version than lhs60.hc.p737,and avoid the version (,lhs60.hc.p737]; Upgrade lexmark c925_firmware to a higher version than lhs60.hv.p737,and avoid the version (,lhs60.hv.p737]; Upgrade lexmark c950_firmware to a higher version than lhs60.tp.p737,and avoid the version (,lhs60.tp.p737]; Upgrade lexmark x548_firmware to a higher version than lhs60.vk.p737,and avoid the version (,lhs60.vk.p737]; Upgrade lexmark xs548_firmware to a higher version than lhs60.vk.p737,and avoid the version (,lhs60.vk.p737]; Upgrade lexmark x74x_firmware to a higher version than lhs60.ny.p737,and avoid the version (,lhs60.ny.p737]; Upgrade lexmark xs748_firmware to a higher version than lhs60.ny.p737,and avoid the version (,lhs60.ny.p737]; Upgrade lexmark x792_firmware to a higher version than lhs60.mr.p737,and avoid the version (,lhs60.mr.p737]; Upgrade lexmark xs79x_firmware to a higher version than lhs60.mr.p737,and avoid the version (,lhs60.mr.p737]; Upgrade lexmark x925_firmware to a higher version than lhs60.hk.p737,and avoid the version (,lhs60.hk.p737]; Upgrade lexmark xs925_firmware to a higher version than lhs60.hk.p737,and avoid the version (,lhs60.hk.p737]; Upgrade lexmark x95x_firmware to a higher version than lhs60.tq.p737,and avoid the version (,lhs60.tq.p737]; Upgrade lexmark xs95x_firmware to a higher version than lhs60.tq.p737,and avoid the version (,lhs60.tq.p737]; Upgrade lexmark 6500e_firmware to a higher version than lhs60.jr.p737,and avoid the version (,lhs60.jr.p737]; Upgrade lexmark c734_firmware to a higher version than lr.sk.p824,and avoid the version (,lr.sk.p824]; Upgrade lexmark c736_firmware to a higher version than lr.ske.p824,and avoid the version (,lr.ske.p824]; Upgrade lexmark e46x_firmware to a higher version than lr.lbh.p824,and avoid the version (,lr.lbh.p824]; Upgrade lexmark t65x_firmware to a higher version than lr.jp.p824,and avoid the version (,lr.jp.p824]; Upgrade lexmark x46x_firmware to a higher version than lr.bs.p824,and avoid the version (,lr.bs.p824]; Upgrade lexmark x65x_firmware to a higher version than lr.mn.p824,and avoid the version (,lr.mn.p824]; Upgrade lexmark x73x_firmware to a higher version than lr.fl.p824,and avoid the version (,lr.fl.p824]; Upgrade lexmark w850_firmware to a higher version than lp.jb.p823,and avoid the version (,lp.jb.p823]; Upgrade lexmark x86x_firmware to a higher version than lp.sp.p823,and avoid the version (,lp.sp.p823]