Lucene search

[email protected]CVE-2021-42631

HistoryJan 31, 2022 - 6:15 p.m.

CVE-2021-42631

2022-01-3118:15:07

CWE-502

[email protected]

web.nvd.nist.gov

cve-2021-42631

printerlogic

web stack

remote code execution

nvd

security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.079 Low

EPSS

Percentile

94.3%

JSON

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.

Affected configurations

NVD

Node

applemacosMatch-

linuxlinux_kernelMatch-

AND

printerlogicvirtual_applianceRange≤20.0.1304

printerlogicweb_stackRange<19.1.1.13

printerlogicweb_stackMatch19.1.1.13-

printerlogicweb_stackMatch19.1.1.13sp2

printerlogicweb_stackMatch19.1.1.13sp3-3

printerlogicweb_stackMatch19.1.1.13sp9

CPENameOperatorVersion
printerlogic:virtual_applianceprinterlogic virtual appliancele20.0.1304
printerlogic:web_stackprinterlogic web stacklt19.1.1.13

CPE	Name	Operator	Version
printerlogic:virtual_appliance	printerlogic virtual appliance	le	20.0.1304
printerlogic:web_stack	printerlogic web stack	lt	19.1.1.13

References

printerlogic.com

portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints

securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html

thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite

www.printerlogic.com/security-bulletin/

www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite

www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.079 Low

EPSS

Percentile

94.3%

JSON

Related for CVE-2021-42631

cvelist1 nvd1 prion1