CVE-2021-42635

HighCVSS 8.1

Published: 31/01/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.52%

92th percentile - higher than 92% of all known CVEs

Summary

The vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below is due to a hardcoded APP_KEY value. This allows pre-authentication remote code execution.

Risk Assessment

An attacker can remotely take over the server without credentials, leading to full system compromise and potential data breach.

Recommendation

Immediately upgrade PrinterLogic Web Stack to a version newer than 19.1.1.13 SP9 that fixes this vulnerability.

Original NVD description (English source)

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.