CVE-2021-42633

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-42633
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://printerlogic.com Product
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints Not Applicable
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html Third Party Advisory
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite Third Party Advisory
https://www.printerlogic.com/security-bulletin/ Vendor Advisory
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite Third Party Advisory
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ Exploit Third Party Advisory
http://printerlogic.com Product
https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints Not Applicable
https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html Third Party Advisory
https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite Third Party Advisory
https://www.printerlogic.com/security-bulletin/ Vendor Advisory
https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite Third Party Advisory
https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:printerlogic:web_stack:*:*:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:19.1.1.13:-:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp2:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp3-3:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp9:*:*:*:*:*:*
History

21 Nov 2024, 06:27

Type Values Removed Values Added
References () http://printerlogic.com - Product () http://printerlogic.com - Product
References () https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints - Not Applicable () https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints - Not Applicable
References () https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html - Third Party Advisory () https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html - Third Party Advisory
References () https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite - Third Party Advisory () https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite - Third Party Advisory
References () https://www.printerlogic.com/security-bulletin/ - Vendor Advisory () https://www.printerlogic.com/security-bulletin/ - Vendor Advisory
References () https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite - Third Party Advisory () https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite - Third Party Advisory
References () https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ - Exploit, Third Party Advisory () https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ - Exploit, Third Party Advisory

07 Feb 2022, 20:12

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : 5.0
v3 : 5.3
References (MISC) https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints - (MISC) https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints - Not Applicable
References (CONFIRM) https://www.printerlogic.com/security-bulletin/ - (CONFIRM) https://www.printerlogic.com/security-bulletin/ - Vendor Advisory
References (MISC) https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html - (MISC) https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html - Third Party Advisory
References (MISC) http://printerlogic.com - (MISC) http://printerlogic.com - Product
References (MISC) https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite - (MISC) https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite - Third Party Advisory
References (MISC) https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ - (MISC) https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/ - Exploit, Third Party Advisory
References (MISC) https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite - (MISC) https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite - Third Party Advisory
CWE CWE-89
CPE cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp3-3:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:*:*:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp9:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:19.1.1.13:-:*:*:*:*:*:*
cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp2:*:*:*:*:*:*

02 Feb 2022, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-02-02 18:15

Updated : 2024-11-21 06:27

NVD link : CVE-2021-42633

Mitre link : CVE-2021-42633

CVE.ORG link : CVE-2021-42633

JSON object : View

Products Affected

printerlogic

  • web_stack
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')