CVE-2021-42640

EUVD-2021-29604
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
Affected Products (NVD)
VendorProductVersion
printerlogicweb_stack
𝑥
< 19.1.1.13
printerlogicweb_stack
19.1.1.13
printerlogicweb_stack
19.1.1.13:sp2
printerlogicweb_stack
19.1.1.13:sp3-3
printerlogicweb_stack
19.1.1.13:sp9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://printerlogic.com
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
https://www.printerlogic.com/security-bulletin/
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/
http://printerlogic.com
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
https://www.printerlogic.com/security-bulletin/
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/