Vulnerabilities

TI-2021-18878 CVE-2021-42642 · GHSA-j947-fh29-79v6

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure…

LOW 36

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and pa…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01375 Published 2022-02-02 No fix listed CWE-312

TI-2021-18877 CVE-2021-42641 · GHSA-c2px-hrc4-9534

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure…

LOW 37

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02043 Published 2022-02-02 No fix listed CWE-668

TI-2021-18876 CVE-2021-42640 · GHSA-9wvm-c92g-hvqg

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure…

MEDIUM 43

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02043 Published 2022-02-02 No fix listed CWE-668

TI-2021-18875 CVE-2021-42639 · GHSA-3425-gj4f-6wvw

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple…

LOW 30

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01151 Published 2022-02-02 No fix listed CWE-79

TI-2021-18873 CVE-2021-42637 · GHSA-gq5h-jhm6-q233

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to…

MEDIUM 46

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0225 Published 2022-02-02 No fix listed CWE-918

TI-2021-18871 CVE-2021-42633 · GHSA-m7g4-jxhg-grwg

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection…

LOW 28

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02039 Published 2022-02-02 No fix listed CWE-89

TI-2021-18874 CVE-2021-42638 · GHSA-28cj-w6xw-4v98

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input…

MEDIUM 44

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.05531 Published 2022-02-01 No fix listed CWE-77

TI-2021-18872 CVE-2021-42635 · GHSA-3wr6-m7v6-4x3g

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value…

MEDIUM 44

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.05569 Published 2022-01-31 No fix listed CWE-798

TI-2021-18870 CVE-2021-42631 · GHSA-56m9-5m6m-wm57

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled…

MEDIUM 44

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0617 Published 2022-01-31 No fix listed CWE-502

Vulnerabilities

Filters