Actively exploited vulnerability

CVE-2023-27350: PaperCut MF/NG Improper Access Control Vulnerability

PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.

CISA KEV source 21 Apr 2023 added 12 May 2023 remediation due

PaperCut · MF/NG

Known ransomware use: Known

Apply updates per vendor instructions.

Trend Micro Research, News and Perspectives26 Apr 2023

Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation

Two vulnerabilities in PaperCut have been found, and one of them is being actively exploited in the wild. This blog entry provides a summary of the vulnerabilities, and includes security guidance for IT and SOC professionals.

CVE-2023-27350: PaperCut MF/NG Improper Access Control Vulnerability

Affected product

Required action

Related Yasna coverage

Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation