CVE-2024-1654: Unauthorized write operations in PaperCut NG/MF
First published: Thu Mar 14 2024(Updated: )
This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.
Credit: eb41dac7-0af8-4f84-9f6d-0272772514f4
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| PaperCut NG | <20.1.10 | |
| PaperCut NG | >=21.0.0<21.2.14 | |
| PaperCut NG | >=22.0.0<22.1.5 | |
| PaperCut NG | >=23.0.1<23.0.7 | |
| PaperCut NG | <20.1.10 | |
| PaperCut NG | >=21.0.0<21.2.14 | |
| PaperCut NG | >=22.0.0<22.1.5 | |
| PaperCut NG | >=23.0.1<23.0.7 | |
| Any of | ||
| Apple iOS and macOS | ||
| Linux kernel | ||
| Microsoft Windows | ||
| PaperCut NG |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-1654?
The severity of CVE-2024-1654 is critical due to the potential for remote code execution that can arise from unauthorized write operations.
How do I fix CVE-2024-1654?
To fix CVE-2024-1654, update to the latest version of PaperCut NG/MF that addresses this vulnerability.
Who is affected by CVE-2024-1654?
CVE-2024-1654 affects specific versions of PaperCut NG and PaperCut MF, particularly those prior to the fixed versions mentioned in security bulletins.
What are the requirements for exploiting CVE-2024-1654?
Exploiting CVE-2024-1654 requires authenticated admin access and knowledge of an internal system identifier along with details of a valid user.
What potential impact does CVE-2024-1654 have on systems?
CVE-2024-1654 could allow an attacker to perform unauthorized actions leading to the execution of malicious code on affected systems.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/guess-ai
- vendor/papercut
- canonical/papercut ng
- version/papercut ng/21.0.0
- version/papercut ng/22.0.0
- version/papercut ng/23.0.1
- vendor/apple
- canonical/apple ios and macos
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows