CVE-2021-42642

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and password for a printer.

• CWE-312

• https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpointsThird Party Advisory
• https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.htmlThird Party Advisory
• https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suiteThird Party Advisory
• https://www.printerlogic.com/security-bulletin/Vendor Advisory
• https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suiteThird Party Advisory
• https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/Exploit, Third Party Advisory
• https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpointsThird Party Advisory
• https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.htmlThird Party Advisory
• https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suiteThird Party Advisory
• https://www.printerlogic.com/security-bulletin/Vendor Advisory
• https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suiteThird Party Advisory
• https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/Exploit, Third Party Advisory

Published

Feb 2, 2022

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42637PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use …9.8
• CVE-2021-42638PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do n…8.1
• CVE-2021-42639PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are …6.1
• CVE-2021-4264A vulnerability was found in LinkedIn dustjs up to 2.x and c…8.8
• CVE-2021-42640PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are …9.1
• CVE-2021-42641PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are …7.5
• CVE-2021-42643cmseasy V7.7.5_20211012 is affected by an arbitrary file wri…8.8
• CVE-2021-42644cmseasy V7.7.5_20211012 is affected by an arbitrary file rea…6.5
• CVE-2021-42645CMSimple_XH 1.7.4 is affected by a remote code execution (RC…10
• CVE-2021-42646XML External Entity (XXE) vulnerability in the file based se…9.1
• CVE-2021-42648Cross-site scripting (XSS) vulnerability exists in Coder Cod…6.1
• CVE-2021-4265A vulnerability was found in siwapp-ror. It has been rated a…6.1