Vulnerability Details : CVE-2021-42640
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.
Products affected by CVE-2021-42640
- cpe:2.3:a:printerlogic:web_stack:*:*:*:*:*:*:*:*
- cpe:2.3:a:printerlogic:web_stack:19.1.1.13:-:*:*:*:*:*:*
- cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp2:*:*:*:*:*:*
- cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp3-3:*:*:*:*:*:*
- cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp9:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-42640
0.57%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 78 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-42640
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.4
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:P/A:N |
10.0
|
4.9
|
NIST | |
|
9.1
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
3.9
|
5.2
|
NIST |
CWE ids for CVE-2021-42640
-
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-42640
-
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/
Paranoids’ Vulnerability Research: PrinterLogic Issues Security Alert | Paranoids Blog | Yahoo Inc.Exploit;Third Party Advisory
-
http://printerlogic.com
Eliminate Print Servers | PrinterLogicProduct
-
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
PrinterLogic vendor addresses triple RCE threat against all connected endpoints | The Daily SwigThird Party Advisory
-
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
PrinterLogic đź–¨ Fixes Critical Vulnerabilities in its suite - TheCyberThroneThird Party Advisory
-
https://www.printerlogic.com/security-bulletin/
Security Bulletin | PrinterlogicVendor Advisory
-
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
PrinterLogic Patches Code Execution Flaws in Printer Management Suite | SecurityWeek.ComThird Party Advisory
-
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
PrinterLogic fixes high severity flaws in Printer Management SuiteSecurity AffairsThird Party Advisory
Jump to