CVE-2023-27351 is an authentication bypass vulnerability in PaperCut NG 22.0.5 (Build 63914) and PaperCut MF, allowing remote attackers to bypass authentication without credentials due to improper implementation of the authentication algorithm within the SecurityRequestFilter class. This high-severity vulnerability (CVSS 7.5) has a low attack complexity and can lead to full system compromise (C:H), with no user interaction required. While not yet in the KEV catalog, exploit intelligence indicates public Nuclei templates are available, and it has garnered significant community discussion and media coverage, including reports linking it to Clop and LockBit ransomware attacks.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 15.0, < 20.1.7CPE matchmatch criteria | cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* | ||
>= 21.0.0, < 21.2.11CPE matchmatch criteria | cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* | ||
>= 22.0.0, < 22.0.9CPE matchmatch criteria | cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* | ||
>= 15.0, < 20.1.7CPE matchmatch criteria | cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:* | ||
>= 21.0.0, < 21.2.11CPE matchmatch criteria | cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.