PT-2022-11641 · Printerlogic · Printerlogic Web Stack

Published 2022-02-02 · Updated 2022-02-08 · CVE-2021-42637

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PrinterLogic Web Stack versions 19.1.1.13 SP9 and below

Description The issue allows user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability. This means an attacker can potentially force the server to make unintended requests, possibly leading to unauthorized access or information disclosure.

Recommendations For PrinterLogic Web Stack versions 19.1.1.13 SP9 and below, consider restricting user input to prevent malicious URL crafting until a patch is available. As a temporary workaround, restrict access to sensitive areas of the web stack to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2021-42637

Affected Products

Printerlogic Web Stack

References · 10

• 🔥 https://yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-42637 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42637 · Vendor Advisory
• https://printerlogic.com/security-bulletin · Vendor Advisory
• https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints · Note
• http://printerlogic.com · Note
• https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite · Note
• https://securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite · Note
• https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html · Note
• https://t.me/cibsecurity/36719 · Telegram Post