CVE-2021-42640

CriticalCVSS 9.1

Published: 02/02/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.03%

79th percentile - higher than 79% of all known CVEs

Summary

An IDOR vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an unauthenticated attacker to reassign drivers for any printer.

Risk Assessment

An attacker can take control of printer drivers in the organization, potentially leading to unauthorized printing, data leakage, or disruption of printing services.

Recommendation

Immediately update PrinterLogic Web Stack to a version newer than 19.1.1.13 SP9 that includes a fix for the IDOR vulnerability.

Original NVD description (English source)

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.