CVE-2021-42642

HIGH

PrinterLogic Web Stack <= 19.1.1.13 SP9 - Unauthenticated Insecure Direct Object Reference

Title source: llm

Description

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and password for a printer.

References (7)

Core 7

Core References

Product x_refsource_misc

http://printerlogic.com

Vendor Advisory x_refsource_confirm

https://www.printerlogic.com/security-bulletin/

Exploit, Third Party Advisory x_refsource_misc

https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/

Third Party Advisory x_refsource_misc

https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite

Third Party Advisory x_refsource_misc

https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html

Third Party Advisory x_refsource_misc

https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints

Third Party Advisory x_refsource_misc

https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite

Scores

CVSS v3 7.5

EPSS 0.0139

EPSS Percentile 68.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-312

Status published

Products (2)

printerlogic/web_stack 19.1.1.13 (4 CPE variants)

printerlogic/web_stack < 19.1.1.13

Published Feb 02, 2022

Tracked Since Feb 18, 2026