CVE-2021-42640

CRITICAL

PrinterLogic Web Stack <= 19.1.1.13 SP9 - Unauthenticated Insecure Direct Object Reference

Title source: llm

Description

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.

References (7)

Core 7

Core References

Product x_refsource_misc

http://printerlogic.com

Vendor Advisory x_refsource_confirm

https://www.printerlogic.com/security-bulletin/

Exploit, Third Party Advisory x_refsource_misc

https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/

Third Party Advisory x_refsource_misc

https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite

Third Party Advisory x_refsource_misc

https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html

Third Party Advisory x_refsource_misc

https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints

Third Party Advisory x_refsource_misc

https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite

Scores

CVSS v3 9.1

EPSS 0.0206

EPSS Percentile 78.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE

CWE-668

Status published

Products (2)

printerlogic/web_stack 19.1.1.13 (4 CPE variants)

printerlogic/web_stack < 19.1.1.13

Published Feb 02, 2022

Tracked Since Feb 18, 2026