86 matches found
CVE-2021-42642: Cleartext Storage of Sensitive Information
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and password for a printer...
CVE-2021-42638
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution...
CVE-2021-42638
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution...
CVE-2021-42638
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution...
Remote code execution
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution...
CVE-2021-42638
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution...
CVE-2021-42638
PrinterLogic Web Stack 19.1.1.13 SP9 and earlier is affected by a pre-auth remote code execution vulnerability caused by unsanitized user input. The issue affects the PrinterLogic Web Stack and can lead to arbitrary code execution without authentication. The provided documents consistently descri...
PrinterLogic Web Stack 命令注入漏洞
PrinterLogic Web Stack PrinterLogic Printer Installer is a native web application from PrinterLogic, Inc. Enables It departments to manage and automate the creation/dissemination of Printer Objects and Printer Drivers across print environments from a single management console. A command injection...
CVE-2021-42638: Improper Neutralization of Special Elements used in a Command
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution...
CVE-2021-42635
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APPKEY value, leading to pre-auth remote code execution...
CVE-2021-42635
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APPKEY value, leading to pre-auth remote code execution...
CVE-2021-42631
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution...
CVE-2021-42635
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APPKEY value, leading to pre-auth remote code execution...
CVE-2021-42631
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution...
CVE-2021-42631
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution...
Hardcoded credentials
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APPKEY value, leading to pre-auth remote code execution...
Remote code execution
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution...
CVE-2021-42635
PrinterLogic Web Stack 19.1.1.13 SP9 and earlier uses a hardcoded APP_KEY, enabling pre-auth remote code execution. Root cause: hardcoded credential/key in the stack leading to unauthenticated RCE. No public exploit details provided in the documents. Affected product: PrinterLogic Web Stack; impa...
CVE-2021-42635
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APPKEY value, leading to pre-auth remote code execution...
CVE-2021-42631
PrinterLogic Web Stack (PrinterLogic, Inc.) is affected by CVE-2021-42631: versions 19.1.1.13 SP9 and earlier deserializes attacker-controlled input, enabling pre-auth remote code execution. Root cause is a deserialization flaw in the web stack that can be triggered without authentication, leadin...