CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2024-8405

MEDIUM
6.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-09-26
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack. Note: This CVE has been split from CVE-2024-4712.

Affected Platforms (CPE)

📦
Papercut

Papercut Mf

< 23.0.9
📦
Papercut

Papercut Ng

< 23.0.9

References & Advisories

🔗 https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/

相關漏洞威脅

CVE-2026-6645

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for...

CVE-2025-97857.7

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and managem...

CVE-2024-96726.3

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created...

CVE-2023-394707.2

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remot...