CRITICAL

CVE-2023-27350

Papercut Papercut Mf 2023-04-20 CVSS v3.1

CVSS

9.8

KEV

Description

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.

Summary dbcve.org

Remote, unauthenticated authentication bypass in PaperCut NG 22.0.5 (Build 63914) caused by improper access control in the SetupCompleted class. An attacker can leverage this flaw to bypass authentication entirely and execute arbitrary code in the context of SYSTEM on the PaperCut server.

Mitigation

Upgrade PaperCut NG/MF to a vendor-fixed version that addresses the SetupCompleted class access control flaw (per PaperCut's official advisory for CVE-2023-27350), and restrict network access to the PaperCut management interfaces until patched.

Proof of Concept

Weakness (CWE)

CWE-284 Improper Access Control

EPSS Score

100%

Probability of exploitation in next 30 days

100th percentile

References

http://packetstormsecurity.com/files/171982/PaperCut-MF-NG-Authentication-Bypass-Remote-Code-Execution.html Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/172022/PaperCut-NG-MG-22.0.4-Authentication-Bypass.html Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/172512/PaperCut-NG-MG-22.0.4-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/172780/PaperCut-PaperCutNG-Authentication-Bypass.html Exploit, Third Party Advisory, VDB Entry https://news.sophos.com/en-us/2023/04/27/increased-exploitation-of-papercut-drawing-blood-around-the-internet/ Third Party Advisory https://www.papercut.com/kb/Main/PO-1216-and-PO-1219 Vendor Advisory https://www.zerodayinitiative.com/advisories/ZDI-23-233/ Third Party Advisory, VDB Entry https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27350 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE