Paper/Archive/CVE-2021-42640

CVE-2021-42640

mitre — PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that a…

EPSS 2%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 81.2.812 × 2016.2 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refprinterlogic.com/security-bulletin refyahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert refsecurityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite refsecurityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html refportswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints refthecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite