CVE-2021-42635 is a critical pre-authentication remote code execution vulnerability affecting PrinterLogic Web Stack versions 19.1.1.13 SP9 and below, stemming from the use of a hardcoded APP_KEY value. With a CVSS score of 8.1 (High), this flaw is network-exploitable with high impact on confidentiality, integrity, and availability, but requires high attack complexity. Although it has a high FAUCET Risk Score of 91/100 and an elevated EPSS score, there is no evidence of active exploitation, nor are public exploits (Metasploit, Nuclei, ExploitDB) currently available. Despite this, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 19.1.1.13CPE matchmatch criteria | cpe:2.3:a:printerlogic:web_stack:*:*:*:*:*:*:*:* | ||
19.1.1.13CPE matchmatch criteria | cpe:2.3:a:printerlogic:web_stack:19.1.1.13:-:*:*:*:*:*:* | ||
19.1.1.13CPE matchmatch criteria | cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp2:*:*:*:*:*:* | ||
19.1.1.13CPE matchmatch criteria | cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp3-3:*:*:*:*:*:* | ||
19.1.1.13CPE matchmatch criteria | cpe:2.3:a:printerlogic:web_stack:19.1.1.13:sp9:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.