# CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.

- Page: https://www.vulneraibility.com/cve/CVE-2023-27350
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2023-04-21; CISA due date 2023-05-12; known ransomware use
- EPSS: 100.00% (percentile 100.0)
- Public exploit code: 2 on Exploit-DB · 1 Metasploit module · 14 GitHub proofs of concept · 1 Nuclei template (first 2023-04-21)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2023-12-22)
- Weakness: CWE-284
- Published: 2023-04-20

## Affected versions

- PaperCut NG: affected 22.0.5 (Build 63914)

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://www.zerodayinitiative.com/advisories/ZDI-23-233/
- [other] https://www.papercut.com/kb/Main/PO-1216-and-PO-1219
- [other] http://packetstormsecurity.com/files/171982/PaperCut-MF-NG-Authentication-Bypass-Remote-Code-Execution.html
- [other] http://packetstormsecurity.com/files/172022/PaperCut-NG-MG-22.0.4-Authentication-Bypass.html
- [other] https://news.sophos.com/en-us/2023/04/27/increased-exploitation-of-papercut-drawing-blood-around-the-internet/
- [other] http://packetstormsecurity.com/files/172512/PaperCut-NG-MG-22.0.4-Remote-Code-Execution.html
- [other] http://packetstormsecurity.com/files/172780/PaperCut-PaperCutNG-Authentication-Bypass.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27350

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.