PaperCut MF/NG up to 20.1.6/21.2.10/22.0.8 libsmb2 access control

Summaryinfo

A vulnerability was found in PaperCut MF and NG up to 20.1.6/21.2.10/22.0.8. It has been declared as problematic. This vulnerability affects unknown code of the component libsmb2. Such manipulation leads to access control. This vulnerability is listed as CVE-2023-27350. The attack may be performed from remote. In addition, an exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in PaperCut MF and NG up to 20.1.6/21.2.10/22.0.8. It has been rated as critical. Affected by this issue is some unknown processing of the component libsmb2. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability.

The weakness was presented 04/15/2023. The advisory is shared for download at papercut.com. This vulnerability is handled as CVE-2023-27350 since 02/28/2023. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are unknown but a public exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

The exploit is available at exploit-db.com. It is declared as attacked. This issue was added on 04/21/2023 to the CISA Known Exploited Vulnerabilities Catalog with a due date of 05/12/2023:

Apply updates per vendor instructions.

Upgrading to version 20.1.7, 21.2.11 or 22.0.9 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Exploit-DB (51391). Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• PaperCut

Name

• MF
• NG

Version

• 20.1.0
• 20.1.1
• 20.1.2
• 20.1.3
• 20.1.4
• 20.1.5
• 20.1.6
• 21.2.0
• 21.2.1
• 21.2.2
• 21.2.3
• 21.2.4
• 21.2.5
• 21.2.6
• 21.2.7
• 21.2.8
• 21.2.9
• 21.2.10
• 22.0.0
• 22.0.1
• 22.0.2
• 22.0.3
• 22.0.4
• 22.0.5
• 22.0.6
• 22.0.7
• 22.0.8

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion