Lucene search
CISACISA-KEV-CVE-2023-27350HistoryApr 21, 2023 - 12:00 a.m.
PaperCut MF/NG Improper Access Control Vulnerability
2023-04-2100:00:00
CISA
www.cisa.gov
98
papercut
mf/ng
improper access control
vulnerability
setupcompleted class
authentication bypass
code execution
system context
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.97
Percentile
99.8%
PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.
Related
trendmicroblog
trendmicroblog
Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation
2023-04-26 00:00:00
talosblog
talosblog
cvelist
cvelist
CVE-2023-27350
2023-04-20 00:00:00
zdi
zdi
exploitdb
exploitdb
PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE)
2023-05-23 00:00:00
PaperCut NG/MG 22.0.4 - Authentication Bypass
2023-04-25 00:00:00
zdt
zdt
PaperCut PaperCutNG Authentication Bypass Exploit
2023-06-07 00:00:00
PaperCut NG/MG 22.0.4 - Remote Code Execution Exploit
2023-05-23 00:00:00
PaperCut NG/MG 22.0.4 - Authentication Bypass Exploit
2023-04-25 00:00:00
nvd
nvd
CVE-2023-27350
2023-04-20 16:15:07
packetstorm
packetstorm
PaperCut PaperCutNG Authentication Bypass
2023-06-07 00:00:00
PaperCut NG/MG 22.0.4 Remote Code Execution
2023-05-24 00:00:00
PaperCut NG/MG 22.0.4 Authentication Bypass
2023-04-26 00:00:00
githubexploit
githubexploit
Exploit for Improper Access Control in Papercut Papercut Mf
2023-05-27 11:32:35
Exploit for Improper Access Control in Papercut Papercut Ng
2023-08-04 08:18:48
Exploit for Improper Access Control in Papercut Papercut Mf
2023-04-21 09:19:13
thn
thn
ics
ics
Malicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG
2023-05-11 12:00:00
Understanding Ransomware Threat Actors: LockBit
2023-06-14 12:00:00
nessus
nessus
PaperCut MF Authentication Bypass (CVE-2023-27350)
2023-05-18 00:00:00
PaperCut NG Authentication Bypass (CVE-2023-27350)
2023-04-25 00:00:00
prion
prion
Authentication flaw
2023-04-20 16:15:00
saint
saint
PaperCut authentication bypass
2023-05-12 00:00:00
PaperCut authentication bypass
2023-05-12 00:00:00
metasploit
metasploit
PaperCut PaperCutNG Authentication Bypass
2023-04-25 23:00:33
cve
cve
CVE-2023-27350
2023-04-20 16:15:07
nuclei
nuclei
PaperCut - Unauthenticated Remote Code Execution
2023-04-25 14:03:38
malwarebytes
malwarebytes
Ransomware review: May 2023
2023-05-08 13:45:00
Update your PaperCut application servers now: Exploits in the wild
2023-04-26 04:00:00
rapid7blog
rapid7blog
CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability
2023-05-17 18:35:01
Metasploit Weekly Wrap-Up
2023-06-09 22:02:27
What’s New in InsightVM and Nexpose: Q2 2023 in Review
2023-06-29 13:00:00
attackerkb
attackerkb
CVE-2023-27350
2023-04-20 00:00:00
qualysblog
qualysblog
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
securelist
securelist
IT threat evolution in Q2 2023. Non-mobile statistics
2023-08-30 10:00:41
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.97
Percentile
99.8%
Related for CISA-KEV-CVE-2023-27350