In unserem Hinweisarchiv finden Sie wertvollen Sicherheitshinweisen und Informationen aus vergangenen Jahren. Nutzen Sie unser Archiv jederzeit zum Nachlesen und Nachschlagen für Sie relevanter Informationen.
weiterlesen ...PaperCut: Hot topics
PaperCut Software security response team is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF.
We are aware of confirmed customer incidents and are treating this matter with the highest priority. Our investigation is ongoing. We will update this security bulletin as verified information becomes available, including indicators of compromise and remediation guidance.
Security Bulletin (November 2023)
Some SVEs relating to older versions of PaperCut NG/MF have been rescored and/or split. These are NOT new CVEs and remain fixed. They were rescored after extensive discussions with the security researchers who reported them. These CVEs reflect the worst-case scenario where an Administrator has granted local login access to standard network users on a Windows PaperCut NG/MF server. Additionally, two CVEs have been split into separate CVEs to allow the security researchers who reported them to be separately attributed to CVEs referencing two instances of the same vulnerability type with different paths to different reporters.
- PaperCut NG/MF Security Bulletin (May 2024) - This security bulletin covers the improvements in the newly released versions of PaperCut NG/MF (version 23.0.9 and later). This includes third party dependency updates as part of our ongoing security initiatives. This release also includes fixes for the CVEs addressed in this bulletin... (Mehr erfahren)
- PaperCut NG/MF Security Bulletin (March 2024) - On the 14th March 2024 (Australian Eastern Daylight Time), there will be PaperCut MF & NG maintenance releases containing several security fixes for newly discovered vulnerabilities... (Mehr erfahren)
- Various security patches (August 2023) - impacting PaperCut Mobility Print. Fixes included in Mobility Print version 1.0.3582 and later.
- Various security patches (July 2023) - impacting PaperCut MF/NG. Fixes included in version 22.1.3 and later.
- Various security patches (June 2023) - impacting PaperCut MF/NG. Fixes included in version 22.1.1 and later.
- CVE-2023-27350 and CVE-2023-27351 (March 2023) - impacting PaperCut MF/NG. Fixes included in version 22.0.9 and later.
- Log4Shell (CVE-2021-44228) (Dec 2021) - Full fixes included in version 22.0.8 and later.
- ‘Print Nightmare’ vulnerability (July 2021) - impact on OS level printing when using PaperCut products (along with subsequent MS patching) - all versions.