CVE-2021-42640
Critical · CVSS 9.1PrinterLogic Web Stack — Insecure Direct Object Reference (IDOR) - Unauthenticated Printer Driver Reassignment
- CVSS
- 9.1
- nvd
- EPSS
- —
- KEV
- No
- Class
- other
- CWE-668
Description
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.
Search profile — drives PoC discovery
Symbols printer driver reassignmentIDORunauthenticated driver assignmentWeb Stackprinter managementdriver object reference
Keywords CVE-2021-42640PrinterLogicPrinterLogic Web StackIDORprinter driver reassignmentunauthenticatedCWE-668PrinterLogic SP919.1.1.13
Versions: <= 19.1.1.13 SP9
References
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
- https://www.printerlogic.com/security-bulletin/
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
- https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/
- http://printerlogic.com
- https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints
- https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
- https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite
- https://www.printerlogic.com/security-bulletin/
- https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z