CVE Catalog

CVE-2021-42631

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
6.12%

93th percentile - higher than 93% of all known CVEs

Summary

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserialize attacker-controlled data, leading to pre-authentication remote code execution.

Risk Assessment

An unauthenticated attacker can remotely execute arbitrary code on the server, potentially leading to full system compromise, data theft, or service disruption.

Recommendation

Immediately upgrade PrinterLogic Web Stack to a version later than 19.1.1.13 SP9 that includes a fix for the deserialization vulnerability.

Original NVD description (English source)

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS