CVE-2021-42638
high-risk
Published 2022-02-01
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.
Do I need to act?
!
25.0% chance of exploitation in next 30 days
EPSS score — higher than 75% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10
High
NETWORK
/ HIGH complexity
Affected Vendors
References (14)
Vendor Advisory
http://printerlogic.com
Press/Media Coverage
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-thre...
Third Party Advisory
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-manage...
Press/Media Coverage
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vu...
Vendor Advisory
https://www.printerlogic.com/security-bulletin/
Press/Media Coverage
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-m...
Vendor Advisory
http://printerlogic.com
Press/Media Coverage
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-thre...
Third Party Advisory
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-manage...
Press/Media Coverage
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vu...
Vendor Advisory
https://www.printerlogic.com/security-bulletin/
Press/Media Coverage
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-m...
51
/ 100
high-risk
Severity
24/34 · High
Exploitability
15/34 · Moderate
Exposure
12/34 · Low