Vulnerabilities > CVE-2023-39470 - Unspecified vulnerability in Papercut NG

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

papercut

NVD

Published: 2024-11-22

Updated: 2025-01-09

Summary

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists within the management of the print.script.sandboxed setting. The issue results from the exposure of a dangerous function. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-20965.

Vulnerable Configurations

Part	Description	Count
Application	Papercut Papercut Papercut NG 8.0 Papercut Papercut NG 8.1 Papercut Papercut NG 8.2 Papercut Papercut NG 8.3 Papercut Papercut NG 8.4 Papercut Papercut NG 8.5 Papercut Papercut NG 9.0 Papercut Papercut NG 9.1 Papercut Papercut NG 9.2 Papercut Papercut NG 9.3 Papercut Papercut NG 9.4 Papercut Papercut NG 9.5 Papercut Papercut NG 9.6 Papercut Papercut NG 9.7 Papercut Papercut NG 9.8 Papercut Papercut NG 10.0 Papercut Papercut NG 10.1 Papercut Papercut NG 10.2 Papercut Papercut NG 10.3 Papercut Papercut NG 10.4 Papercut Papercut NG 10.5 Papercut Papercut NG 10.6 Papercut Papercut NG 10.7 Papercut Papercut NG 11.0 Papercut Papercut NG 11.1 Papercut Papercut NG 11.2 Papercut Papercut NG 11.3 Papercut Papercut NG 11.4 Papercut Papercut NG 11.5 Papercut Papercut NG 11.6 Papercut Papercut NG 12.0 Papercut Papercut NG 12.1 Papercut Papercut NG 12.2 Papercut Papercut NG 12.3 Papercut Papercut NG 12.4 Papercut Papercut NG 12.5 Papercut Papercut NG 13.0 Papercut Papercut NG 13.1 Papercut Papercut NG 13.2 Papercut Papercut NG 13.3 Papercut Papercut NG 13.4 Papercut Papercut NG 13.5 Papercut Papercut NG 14.0 Papercut Papercut NG 14.1 Papercut Papercut NG 14.2 Papercut Papercut NG 14.3 Papercut Papercut NG 15.0 Papercut Papercut NG 15.1 Papercut Papercut NG 15.2 Papercut Papercut NG 15.3 Papercut Papercut NG 16.0 Papercut Papercut NG 16.1 Papercut Papercut NG 16.2 Papercut Papercut NG 16.3 Papercut Papercut NG 16.4 Papercut Papercut NG 17.0 Papercut Papercut NG 17.0.3 Papercut Papercut NG 17.0.4 Papercut Papercut NG 17.0.5 Papercut Papercut NG 17.0.6 Papercut Papercut NG 17.0.7 Papercut Papercut NG 17.1 Papercut Papercut NG 17.1.1 Papercut Papercut NG 17.1.2 Papercut Papercut NG 17.1.3 Papercut Papercut NG 17.2 Papercut Papercut NG 17.2.1 Papercut Papercut NG 17.2.2 Papercut Papercut NG 17.2.3 Papercut Papercut NG 17.2.4 Papercut Papercut NG 17.3 Papercut Papercut NG 17.3.3 Papercut Papercut NG 17.3.4 Papercut Papercut NG 17.3.5 Papercut Papercut NG 17.3.6 Papercut Papercut NG 17.4 Papercut Papercut NG 17.4.2 Papercut Papercut NG 17.4.3 Papercut Papercut NG 17.4.4 Papercut Papercut NG 18.0 Papercut Papercut NG 18.0.2 Papercut Papercut NG 18.0.4 Papercut Papercut NG 18.0.5 Papercut Papercut NG 18.1.1 Papercut Papercut NG 18.1.2 Papercut Papercut NG 18.1.3 Papercut Papercut NG 18.1.4 Papercut Papercut NG 18.2.1 Papercut Papercut NG 18.2.2 Papercut Papercut NG 18.2.3 Papercut Papercut NG 18.2.4 Papercut Papercut NG 18.2.5 Papercut Papercut NG 18.2.6 Papercut Papercut NG 18.3.2 Papercut Papercut NG 18.3.3 Papercut Papercut NG 18.3.4 Papercut Papercut NG 18.3.5 Papercut Papercut NG 18.3.6 Papercut Papercut NG 18.3.7 Papercut Papercut NG 18.3.8 Papercut Papercut NG 18.3.9 Papercut Papercut NG 19.0.1 Papercut Papercut NG 19.0.2 Papercut Papercut NG 19.0.3 Papercut Papercut NG 19.0.4 Papercut Papercut NG 19.0.5 Papercut Papercut NG 19.0.6 Papercut Papercut NG 19.0.7 Papercut Papercut NG 19.1.1 Papercut Papercut NG 19.1.2 Papercut Papercut NG 19.1.3 Papercut Papercut NG 19.1.4 Papercut Papercut NG 19.1.5 Papercut Papercut NG 19.1.6 Papercut Papercut NG 19.2.1 Papercut Papercut NG 19.2.2 Papercut Papercut NG 19.2.3 Papercut Papercut NG 19.2.4 Papercut Papercut NG 19.2.5 Papercut Papercut NG 19.2.6 Papercut Papercut NG 19.2.7 Papercut Papercut NG 20.0.1 Papercut Papercut NG 20.0.2 Papercut Papercut NG 20.0.3 Papercut Papercut NG 20.0.4 Papercut Papercut NG 20.1.1 Papercut Papercut NG 20.1.2 Papercut Papercut NG 20.1.3 Papercut Papercut NG 20.1.4 Papercut Papercut NG 20.1.5 Papercut Papercut NG 20.1.6 Papercut Papercut NG 20.1.7 Papercut Papercut NG 21.0.0 Papercut Papercut NG 21.0.1 Papercut Papercut NG 21.0.3 Papercut Papercut NG 21.0.4 Papercut Papercut NG 21.0.5 Papercut Papercut NG 21.1.1 Papercut Papercut NG 21.1.3 Papercut Papercut NG 21.2.1 Papercut Papercut NG 21.2.3 Papercut Papercut NG 21.2.4 Papercut Papercut NG 21.2.5 Papercut Papercut NG 21.2.6 Papercut Papercut NG 21.2.7 Papercut Papercut NG 21.2.8 Papercut Papercut NG 21.2.9 Papercut Papercut NG 21.2.10 Papercut Papercut NG 21.2.11 Papercut Papercut NG 22.0.0 Papercut Papercut NG 22.0.1 Papercut Papercut NG 22.0.3 Papercut Papercut NG 22.0.4 Papercut Papercut NG 22.0.5 Papercut Papercut NG 22.0.6 Papercut Papercut NG 22.0.8 Papercut Papercut NG 22.0.9 Papercut Papercut NG 22.0.10 Papercut Papercut NG 22.0.11 Papercut Papercut NG 22.0.12 Papercut Papercut NG 22.1	161

Summary

Vulnerable Configurations

References