CVE-2021-42637

CriticalCVSS 9.8

Published: 02/02/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.23%

81th percentile - higher than 81% of all known CVEs

Summary

An SSRF vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an attacker to use user-controlled input to craft a URL, enabling server-side requests to internal network resources.

Risk Assessment

The risk includes potential scanning of internal networks, access to sensitive data or services, and possible attacks on other systems within the organization's infrastructure.

Recommendation

Immediately upgrade PrinterLogic Web Stack to a version later than 19.1.1.13 SP9, which includes a fix for the SSRF vulnerability.

Original NVD description (English source)

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability.