CVE Catalog

CVE-2021-42638

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
5.49%

92th percentile - higher than 92% of all known CVEs

Summary

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to pre-authentication remote code execution due to insufficient input sanitization.

Risk Assessment

An attacker can gain full control of the server without authentication, leading to complete system compromise and potential access to sensitive data.

Recommendation

Immediately upgrade PrinterLogic Web Stack to a version newer than 19.1.1.13 SP9 that includes the security fix.

Original NVD description (English source)

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS