CVE Catalog
CVE-2021-42638
HighCVSS 8.1Exploitation Probability (EPSS)
Very high risk5.49%
92th percentile - higher than 92% of all known CVEs
Summary
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to pre-authentication remote code execution due to insufficient input sanitization.
Risk Assessment
An attacker can gain full control of the server without authentication, leading to complete system compromise and potential access to sensitive data.
Recommendation
Immediately upgrade PrinterLogic Web Stack to a version newer than 19.1.1.13 SP9 that includes the security fix.
Original NVD description (English source)
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.

