CVEvulnerability
CVE-2021-42642
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-02-02
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-312
Description
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and password for a printer.
Affected configurations
• printerlogic web stack (< 19.1.1.13)
• printerlogic web stack 19.1.1.13
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints Third Party Advisory
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html Third Party Advisory
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite Third Party Advisory
- https://www.printerlogic.com/security-bulletin/ Vendor Advisory
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite Third Party Advisory
- https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ Exploit, Third Party Advisory
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints Third Party Advisory
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html Third Party Advisory
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite Third Party Advisory
- https://www.printerlogic.com/security-bulletin/ Vendor Advisory
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite Third Party Advisory
- https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ Exploit, Third Party Advisory