CVE-2021-42640: 
PrinterLogic Server vulnerability analysis and mitigation

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below contain an Insecure Direct Object Reference (IDOR) vulnerability (CVE-2021-42640) that allows an unauthenticated attacker to reassign drivers for any printer. The vulnerability was discovered in 2021 and was patched in January 2022 with the release of version 19.1.1.13-SP10 (Vendor Advisory, SecurityWeek).

The vulnerability is classified as an Insecure Direct Object Reference (IDOR) issue that specifically affects the driver assignment functionality. It has been assigned a CVSS v3.1 base score of 9.1 CRITICAL with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, indicating high severity with potential for unauthorized access and modification of printer configurations (NVD).

The vulnerability allows an unauthenticated attacker to manipulate printer driver assignments, potentially affecting all connected endpoints in an organization's printing infrastructure. This could lead to unauthorized control over printer configurations and potential service disruptions (SecurityWeek).

The majority of PrinterLogic installations are not directly accessible from the Internet. Attackers would first need a privileged network position, such as access through a VPN or another vulnerability in an appliance on the edge, to exploit the PrinterLogic Web Stack server (Yahoo Paranoids).

PrinterLogic addressed the vulnerability in Web Stack version 19.1.1.13-SP10. Organizations are advised to upgrade to this version or later. For Virtual Appliance users, no client software updates are required. The vendor has also automatically pushed patches to its SaaS platform worldwide (SecurityWeek).