Lucene search

[email protected]CVE-2023-39143

HistoryAug 04, 2023 - 5:15 p.m.

CVE-2023-39143

2023-08-0417:15:11

CWE-22

[email protected]

web.nvd.nist.gov

papercut

path traversal

windows

vulnerability

cve-2023-39143

remote code execution

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.954 High

EPSS

Percentile

99.3%

JSON

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).

CPENameOperatorVersion
papercut:papercut_mfpapercut papercut mflt22.1.3
papercut:papercut_mfpapercut papercut mfeq18.0.5
papercut:papercut_mfpapercut papercut mfeq17.3.3
papercut:papercut_mfpapercut papercut mfeq9.5
papercut:papercut_mfpapercut papercut mfeq12.0
papercut:papercut_mfpapercut papercut mfeq17.2.4
papercut:papercut_mfpapercut papercut mfeq18.2.0
papercut:papercut_mfpapercut papercut mfeq9.7
papercut:papercut_mfpapercut papercut mfeq16.2
papercut:papercut_mfpapercut papercut mfeq11.5

CPE	Name	Operator	Version
papercut:papercut_mf	papercut papercut mf	lt	22.1.3
papercut:papercut_mf	papercut papercut mf	eq	18.0.5
papercut:papercut_mf	papercut papercut mf	eq	17.3.3
papercut:papercut_mf	papercut papercut mf	eq	9.5
papercut:papercut_mf	papercut papercut mf	eq	12.0
papercut:papercut_mf	papercut papercut mf	eq	17.2.4
papercut:papercut_mf	papercut papercut mf	eq	18.2.0
papercut:papercut_mf	papercut papercut mf	eq	9.7
papercut:papercut_mf	papercut papercut mf	eq	16.2
papercut:papercut_mf	papercut papercut mf	eq	11.5

Rows per page:

1-10 of 3411

References

www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/

www.papercut.com/kb/Main/securitybulletinjuly2023/

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.954 High

EPSS

Percentile

99.3%

JSON

Related for CVE-2023-39143

nessus4 cvelist1 githubexploit1 nuclei1 prion1 thn1