{"api_version":"1","generated_at":"2026-07-23T13:29:17+00:00","cve":"CVE-2021-42641","urls":{"html":"https://cve.report/CVE-2021-42641","api":"https://cve.report/api/cve/CVE-2021-42641.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2021-42641","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-42641"},"summary":{"title":"CVE-2021-42641","description":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users.","state":"PUBLISHED","assigner":"mitre","published_at":"2022-02-02 18:15:07","updated_at":"2026-07-09 01:17:06"},"problem_types":["CWE-668","n/a"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://www.printerlogic.com/security-bulletin/","name":"https://www.printerlogic.com/security-bulletin/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Bulletin | Printerlogic","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite","name":"https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"PrinterLogic ???? Fixes Critical Vulnerabilities in its suite - TheCyberThrone","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints","name":"https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"PrinterLogic vendor addresses triple RCE threat against all connected endpoints | The Daily Swig","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html","name":"https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"PrinterLogic fixes high severity flaws in Printer Management SuiteSecurity Affairs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite","name":"https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"PrinterLogic Patches Code Execution Flaws in Printer Management Suite | SecurityWeek.Com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/","name":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"title":"Paranoids’ Vulnerability Research: PrinterLogic Issues Security Alert | Paranoids Blog | Yahoo Inc.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://printerlogic.com","name":"http://printerlogic.com","refsource":"MITRE","tags":[],"title":"Eliminate Print Servers | PrinterLogic","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42641","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42641","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2021","cve_id":"42641","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"printerlogic","cpe5":"web_stack","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"42641","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"printerlogic","cpe5":"web_stack","cpe6":"19.1.1.13","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"42641","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"printerlogic","cpe5":"web_stack","cpe6":"19.1.1.13","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"42641","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"printerlogic","cpe5":"web_stack","cpe6":"19.1.1.13","cpe7":"sp3-3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"42641","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"printerlogic","cpe5":"web_stack","cpe6":"19.1.1.13","cpe7":"sp9","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2021","cve_id":"42641","cve":"CVE-2021-42641","epss":"0.020270000","percentile":"0.787330000","score_date":"2026-07-12","updated_at":"2026-07-13 00:07:38"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2026-07-09T00:15:22.276Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.printerlogic.com/security-bulletin/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2026-07-04T23:57:43.797Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"url":"https://www.printerlogic.com/security-bulletin/"},{"url":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/"},{"url":"https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite"},{"url":"https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html"},{"url":"https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints"},{"url":"https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2021-42641","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://printerlogic.com","refsource":"MISC","url":"http://printerlogic.com"},{"name":"https://www.printerlogic.com/security-bulletin/","refsource":"CONFIRM","url":"https://www.printerlogic.com/security-bulletin/"},{"name":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/","refsource":"MISC","url":"https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/"},{"name":"https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite","refsource":"MISC","url":"https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite"},{"name":"https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html","refsource":"MISC","url":"https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html"},{"name":"https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints","refsource":"MISC","url":"https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints"},{"name":"https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite","refsource":"MISC","url":"https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2021-42641","datePublished":"2022-02-02T17:21:27.000Z","dateReserved":"2021-10-18T00:00:00.000Z","dateUpdated":"2026-07-09T00:15:22.276Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2022-02-02 18:15:07","lastModifiedDate":"2026-07-09 01:17:06","problem_types":["CWE-668","n/a"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:printerlogic:web_stack:*:*:*:*:*:*:*:*","versionEndExcluding":"19.1.1.13","matchCriteriaId":"D7412210-0463-4336-9FAD-E50061806186"},{"vulnerable":true,"criteria":"cpe:2.3:a:printerlogic:web_stack:19.1.1.13:-:*:*:*:*:*:*","matchCriteriaId":"A1B7FE83-A6AC-4A16-B0DE-9D1C22AA40FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp2:*:*:*:*:*:*","matchCriteriaId":"99309983-36D6-47CA-9CBC-32A210C7DF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp3-3:*:*:*:*:*:*","matchCriteriaId":"CBD47013-B42E-4CF1-AF63-AD644B77DFBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp9:*:*:*:*:*:*","matchCriteriaId":"60152B10-DC40-4132-AF45-52ECFD6782CA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2021","CveId":"42641","Ordinal":"1","Title":"CVE-2021-42641","CVE":"CVE-2021-42641","Year":"2021"},"notes":[{"CveYear":"2021","CveId":"42641","Ordinal":"1","NoteData":"PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users.","Type":"Description","Title":"CVE-2021-42641"}]}}}