CVE-2021-42640

CriticalCVSS 9.1/10Last modified Jul 9, 2026

Description

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-668

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpointsThird Party Advisory
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.htmlThird Party Advisory
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suiteThird Party Advisory
https://www.printerlogic.com/security-bulletin/Vendor Advisory
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suiteThird Party Advisory
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/Exploit, Third Party Advisory
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpointsThird Party Advisory
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.htmlThird Party Advisory
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suiteThird Party Advisory
https://www.printerlogic.com/security-bulletin/Vendor Advisory
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suiteThird Party Advisory
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/Exploit, Third Party Advisory

Timeline

Published: Feb 2, 2022
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-426417.5PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allo CVE-2021-426427.5PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allo CVE-2021-426438.8cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script file is written to th CVE-2021-426446.5cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file information of the website CVE-2021-4264510.0CMSimple_XH 1.7.4 is affected by a remote code execution (RCE) vulnerability. To exploit this vulnerability, an attacker must use the "File"CVE-2021-426469.1XML External Entity (XXE) vulnerability in the file based service provider creation feature of the Management Console in WSO2 API Manager 2.CVE-2021-426486.1Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted U CVE-2021-42656.1A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation lead CVE-2021-426506.1Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates.CVE-2021-426518.8A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to e CVE-2021-426549.8SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitra CVE-2021-426558.8SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.