NVD disclosure day

Published threat advisories for February 2, 2022

CVE advisoryCRITICAL

CVE-2021-42640

PrinterLogic Web Stack Insecure Direct Object Reference Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An Insecure Direct Object Reference vulnerability in PrinterLogic Web Stack allows unauthenticated attackers to reassign printer drivers, potentially impacting printing services. This could lead to unauthorized control over network printing if the technology is reachable.

NVD published:

CVE advisoryCRITICAL

CVE-2021-42637

PrinterLogic Web Stack SSRF Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A Server Side Request Forgery vulnerability exists in PrinterLogic Web Stack, where user-controlled input can be used to craft a URL. If reachable, this could allow an unauthenticated attacker to send unintended requests to internal or external resources, potentially leading to unauthorized access or system compromise.

NVD published: