CVE-2023-39143

CRITICAL

9.8

Beschreibung

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht8/4/2023

Zuletzt geandert5/5/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

microsoft:windowspapercut:papercut_mfpapercut:papercut_ng

Schwachen (CWE)

CWE-22CWE-22

Referenzen

https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/(cve@mitre.org)

https://www.papercut.com/kb/Main/securitybulletinjuly2023/(cve@mitre.org)

https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/(af854a3a-2127-422b-91ae-364da2661108)

https://www.papercut.com/kb/Main/securitybulletinjuly2023/(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.