CVE-2021-42642

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and password for a printer.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
printerlogicweb_stack
𝑥
< 19.1.1.13
printerlogicweb_stack
19.1.1.13
printerlogicweb_stack
19.1.1.13:sp2
printerlogicweb_stack
19.1.1.13:sp3-3
printerlogicweb_stack
19.1.1.13:sp9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://printerlogic.com
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
https://www.printerlogic.com/security-bulletin/
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/
http://printerlogic.com
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
https://www.printerlogic.com/security-bulletin/
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/