CVE-2019-16758

Name of the Vulnerable Software and Affected Versions Lexmark Services Monitor version 2.27.4.0.39

Description A remote attacker can exploit a directory traversal issue in the Lexmark Services Monitor to obtain local files on the host operating system. This can be achieved by using a directory traversal technique with /../../../ or ..%2F..%2F..%2F. The service is running on TCP port 2070.

Recommendations For Lexmark Services Monitor version 2.27.4.0.39, consider restricting access to the service running on TCP port 2070 until a patch is available. As a temporary workaround, limit the service's ability to access local files on the host operating system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.