Lucene search

MitreCVE-2021-42638

HistoryFeb 01, 2022 - 11:15 p.m.

CVE-2021-42638

2022-02-0123:15:07

CWE-77

mitre

web.nvd.nist.gov

printerlogic

web stack

rce

cve-2021-42638

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.122

Percentile

95.5%

JSON

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.

Affected configurations

Nvd

Node

printerlogicweb_stackRange<19.1.1.13

printerlogicweb_stackMatch19.1.1.13-

printerlogicweb_stackMatch19.1.1.13sp2

printerlogicweb_stackMatch19.1.1.13sp3-3

printerlogicweb_stackMatch19.1.1.13sp9

AND

applemacosMatch-

linuxlinux_kernelMatch-

VendorProductVersionCPE
printerlogicweb_stack*cpe:2.3:a:printerlogic:web_stack:*:*:*:*:*:*:*:*
printerlogicweb_stack19.1.1.13cpe:2.3:a:printerlogic:web_stack:19.1.1.13:-:*:*:*:*:*:*
printerlogicweb_stack19.1.1.13cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp2:*:*:*:*:*:*
printerlogicweb_stack19.1.1.13cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp3-3:*:*:*:*:*:*
printerlogicweb_stack19.1.1.13cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp9:*:*:*:*:*:*
applemacos-cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
printerlogic	web_stack	*	cpe:2.3:a:printerlogic:web_stack::::::::
printerlogic	web_stack	19.1.1.13	cpe:2.3:a:printerlogic:web_stack:19.1.1.13:-::::::
printerlogic	web_stack	19.1.1.13	cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp2::::::
printerlogic	web_stack	19.1.1.13	cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp3-3::::::
printerlogic	web_stack	19.1.1.13	cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp9::::::
apple	macos	-	cpe:2.3:o:apple:macos:-:::::::*
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*

References

printerlogic.com

portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints

securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html

thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite

www.printerlogic.com/security-bulletin/

www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite

www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.122

Percentile

95.5%

JSON

Related for CVE-2021-42638