Printerlogic Web Stack — known CVE vulnerabilities

Every CVE whose affected-product data names Printerlogic Web Stack, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2021-42637 — CVSS 9.8 (critical): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request…
• CVE-2021-42640 — CVSS 9.1 (critical): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that…
• CVE-2021-42638 — CVSS 8.1 (high): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.
• CVE-2021-42631 — CVSS 8.1 (high): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.
• CVE-2021-42635 — CVSS 8.1 (high): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.
• CVE-2021-42641 — CVSS 7.5 (high): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that…
• CVE-2021-42642 — CVSS 7.5 (high): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that…
• CVE-2021-42639 — CVSS 6.1 (medium): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities. Attacker…
• CVE-2021-42633 — CVSS 5.3 (medium): PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional…