CVEvulnerability
CVE-2021-42639
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-02-02
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities. Attacker controlled input is reflected back in the page without sanitization.
Affected configurations
• printerlogic web stack (< 19.1.1.13)
• printerlogic web stack 19.1.1.13
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints Not Applicable
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html Third Party Advisory
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite Third Party Advisory
- https://www.printerlogic.com/security-bulletin/ Vendor Advisory
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite Third Party Advisory
- https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ Exploit, Third Party Advisory
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints Not Applicable
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html Third Party Advisory
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite Third Party Advisory
- https://www.printerlogic.com/security-bulletin/ Vendor Advisory
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite Third Party Advisory
- https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ Exploit, Third Party Advisory