{"id":"CVE-2021-42640","aliases":["EUVD-2021-29604","GHSA-9wvm-c92g-hvqg"],"status":"published","title":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct...","description":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02043,"percentile":0.81429,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-668"],"published":"2022-02-02T17:18:46Z","modified":"2026-07-09T01:17:06Z","products":[{"vendor":"printerlogic","product":"web_stack"}],"references":[{"url":"https://www.printerlogic.com/security-bulletin/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss\u0026utm_medium=rss\u0026utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42640"},{"url":"http://printerlogic.com"},{"url":"https://www.printerlogic.com/security-bulletin"},{"url":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert"},{"url":"https://github.com/advisories/GHSA-9wvm-c92g-hvqg"}],"sources":{"cve":[{"id":"CVE-2021-42640","description":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.","status":"published","published":"2022-02-02T17:18:46Z","modified":"2026-07-09T00:15:21.054Z","updated_at":"2026-11-02T14:32:58.739039Z"}],"euvd":[{"id":"EUVD-2021-29604","description":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.","status":"published","published":"2022-02-02T17:18:46Z","modified":"2026-07-09T00:15:21Z","updated_at":"2026-11-02T18:20:08.60883Z"}],"ghsa":[{"id":"GHSA-9wvm-c92g-hvqg","title":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct...","description":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.","status":"published","published":"2022-02-09T00:00:51Z","modified":"2026-07-05T03:31:48Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T15:09:15.466495Z"}],"nvd":[{"id":"CVE-2021-42640","description":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.","status":"published","published":"2022-02-02T18:15:07.547Z","modified":"2026-07-09T01:17:06.187Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:07:04.178977Z"}]}}