The vulnerability of the SetupCompleted class in printing control software such as PaperCut MF and PaperCut NG allows a perpetrator to execute arbitrary code.

🗓️ 27 Apr 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

SetupCompleted vulnerability in PaperCut MF and NG allows SYSTEM code execution from access errors.

Reporter	Title	Published	Views	Family All 79
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	21 Apr 202320:13	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	14 Apr 202502:33	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	25 Apr 202320:51	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	27 May 202311:32	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	30 May 202619:08	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	21 Apr 202320:13	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	9 Mar 202518:08	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	5 Jul 202514:07	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	22 Apr 202321:34	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	21 Apr 202320:13	–	githubexploit

Source	Link
papercut	www.papercut.com/kb/Main/PO-1216-and-PO-1219
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
packetstormsecurity	www.packetstormsecurity.com/files/172512/PaperCut-NG-MG-22.0.4-Remote-Code-Execution.html
web	www.web.nvd.nist.gov/view/vuln/detail

22 Apr 2026 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 39.8

CVSS 210

EPSS0.99999

paper cut mf paper cut ng setupcompleted vulnerability access management error remote code execution system context