PRIOn knowledge basePRION:CVE-2021-42641Design/Logic Flaw
0.003 Low
EPSS
Percentile
71.5%
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| web_stack | eq | 19.1.1.13 sp9 | |
| web_stack | eq | 19.1.1.13 | |
| web_stack | lt | 19.1.1.13 | |
| web_stack | eq | 19.1.1.13 | |
| web_stack | eq | 19.1.1.13 sp2 |
References
printerlogic.com
portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
www.printerlogic.com/security-bulletin/
www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/
Related
