Vulnerability · Published Mar 14, 2024 · Assigned by PaperCut
CVE-2024-1654Unauthorized write operations in PaperCut NG/MF
High 7.2
In plain English
A high-severity security flaw in PaperCut NG, PaperCut MF from PaperCut. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)1.3%top 29.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PaperCut | PaperCut NG, PaperCut MF | 0 – before 23.0.70 – before 22.1.50 – before 21.2.140 – before 20.1.10 |
Weakness: CWE-183 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H