← Back

CVE-2024-1654

nvd nist
Published: Mar 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.

Affected (8)

Papercut
2 products
Papercut Mf
Papercut Ng
Configuration A
8 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Papercut
Papercut Mf
Before 20.1.10
Papercut Mf
From 21.0.0 to 21.2.14
Papercut Mf
From 22.0.0 to 22.1.5
Papercut Mf
From 23.0.1 to 23.0.7
Papercut
Papercut Ng
Before 20.1.10
Papercut Ng
From 21.0.0 to 21.2.14
Papercut Ng
From 22.0.0 to 22.1.5
Papercut Ng
From 23.0.1 to 23.0.7
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-183
Permissive List of Allowed Inputs
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are explicitly allowed by policy because the inputs are assumed to be safe, but the list is too permissive - that is, it allows an input that is unsafe, leading to resultant weaknesses.

References (2)

Source: eb41dac7-0af8-4f84-9f6d-0272772514f4
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.