PT-2022-21315 · Printerlogic · Printerlogic Windows Client

Published 2022-08-25 · Updated 2025-01-22 · CVE-2022-32427

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PrinterLogic Windows Client versions 25.0.0.676 and earlier

Description The issue allows attackers to execute directory traversal. Authenticated users with prior knowledge of the driver filename could exploit this to escalate privileges or distribute malicious content.

Recommendations For versions 25.0.0.676 and earlier, upgrade to PrinterLogic Windows Client 25.0.0688 to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories and files to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-32427

Affected Products

Printerlogic Windows Client

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-32427 · Security Note
• https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm?tocpath=_____9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-32427 · Vendor Advisory
• https://printerlogic.com/security-bulletin · Vendor Advisory
• https://t.me/cvenotify/35136 · Telegram Post
• https://t.me/cvenotify/108225 · Telegram Post
• https://t.me/cibsecurity/48695 · Telegram Post