Vulnerability Description
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and password for a printer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Printerlogic | Web Stack | < 19.1.1.13 |
Related Weaknesses (CWE)
References
- http://printerlogic.comProduct
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threThird Party Advisory
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-manageThird Party Advisory
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vuThird Party Advisory
- https://www.printerlogic.com/security-bulletin/Vendor Advisory
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-mThird Party Advisory
- https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogicExploitThird Party Advisory
- http://printerlogic.comProduct
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threThird Party Advisory
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-manageThird Party Advisory
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vuThird Party Advisory
- https://www.printerlogic.com/security-bulletin/Vendor Advisory
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-mThird Party Advisory
- https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogicExploitThird Party Advisory
FAQ
What is CVE-2021-42642?
CVE-2021-42642 is a vulnerability with a CVSS score of 7.5 (HIGH). PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext con...
How severe is CVE-2021-42642?
CVE-2021-42642 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-42642?
Check the references section above for vendor advisories and patch information. Affected products include: Printerlogic Web Stack.