CVE Catalog

CVE-2021-42633

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.02%

79th percentile - higher than 79% of all known CVEs

Summary

SQL Injection vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an attacker to inject malicious SQL code, potentially gaining unauthorized access to additional audit records.

Risk Assessment

An attacker could access sensitive audit data, compromising system confidentiality and integrity, and potentially enabling further attacks.

Recommendation

Immediately upgrade PrinterLogic Web Stack to a version later than 19.1.1.13 SP9, which includes a fix for the SQL injection vulnerability.

Original NVD description (English source)

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS