PaperCut NG/MF vulnerabilities
5 known vulnerabilities in PaperCut NG/MF from PaperCut. 5 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
PaperCut NG/MF: Improper Limitation of a Pathname to a Restricted Directory
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax
- 7.5 High severity
PaperCut NG/MF: Improper Control of Generation of Code
A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface c
- 8.1 High severity
PaperCut NG/MF: Time-of-check Time-of-use (TOCTOU) Race Condition
A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data ch
- 7.5 High severity
Papercut NG/MF: Cleartext Transmission of Sensitive Information
The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was
- 8.8 High severity
PaperCut NG/MF Cross-Site Request Forgery (CSRF) Exploited
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an ad