CVE-2021-42640

CRITICAL

PrinterLogic Web Stack <= 19.1.1.13 SP9 - Unauthenticated Insecure Direct Object Reference

Title source: llm

Description

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.

References (7)

Core 7

Core References

Product x_refsource_misc

http://printerlogic.com

Vendor Advisory

https://www.printerlogic.com/security-bulletin/

Exploit, Third Party Advisory

https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/

Third Party Advisory

https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite

Third Party Advisory

https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html

Third Party Advisory

https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints

Third Party Advisory

https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite

Scores

CVSS v3 9.1

EPSS 0.0203

EPSS Percentile 79.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE

CWE-668

Status published

Products (2)

printerlogic/web_stack 19.1.1.13 (4 CPE variants)

printerlogic/web_stack < 19.1.1.13

Published Feb 02, 2022

Tracked Since Feb 18, 2026