CVE-2023-27350
PaperCut MF/NG Improper Access Control Vulnerability
- Published
- Apr 20, 2023
- Updated
- Oct 21, 2025
- Assigning CNA
- zdi
- Evidence observed
- Apr 21, 2023
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 100.0%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.
Sources
modules/exploits/multi/http/papercut_ng_auth_bypass.rb
Metasploit Framework modulesDeclared conditions
- platform: Java($.exploit_multi/http/papercut_ng_auth_bypass.platform)
- verification: check_declared($.exploit_multi/http/papercut_ng_auth_bypass.check)
http/cves/2023/CVE-2023-27350.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: word($.matchers[*].type)
- oob: interactsh_reference($.template_text)
- CVE-2023-27350Exploit
Perfom With Massive Authentication Bypass In PaperCut MF/NG
Proof-of-concept exploit for CVE-2023-27350 in PaperCut NG; exploits SetupCompleted access-control flaw to bypass authentication and execute code as SYSTEM.
- CVE-2023-27350Exploit
PaperCut NG/MG Authentication Bypass and Remote Code Execution (RCE) Exploit Tool. A standalone Bash implementation of the PaperCut exploit chain, featuring optional proxy support, automated session elevation, and dynamic command injection via the print scripting engine. Designed for security auditing and authorized penetration testing.
- CVE-2023-27350Exploit
Proof-of-concept exploit for PaperCut CVE-2023-27350, chaining authentication bypass with built-in scripting abuse to achieve remote code execution on vulnerable MF/NG instances.
This exploit is based on CVE-2023-27350 and was built upon the original exploit by horizon3ai and the Metasploit module.
- CVE-2023-27350Exploit
Unauthenticated remote command execution in Papercut service allows an attacker to execute commands due to improper access controls in the SetupCompleted Java class.
- CVE-2023-27350Exploit
Papercut Vulnerability, Affected Versions are PaperCut MF or NG version 8.0 or later (excluding patched versions) on all OS platforms.
Proof-of-concept exploit for CVE-2023-27350 authentication bypass in PaperCut MF/NG, allowing unauthenticated interaction with vulnerable print management servers.
Exploit for Papercut CVE-2023-27350. [+] Reverse shell [+] Mass checking
Educational proof-of-concept for PaperCut pre-auth RCE chain (CVE-2023-27350, CVE-2023-27351) with setup scripts and authorized testing guidance.
- CVE-2023-27350-POCExploit
Proof-of-concept exploit for CVE-2023-27350 targeting authentication bypass in PaperCut MF/NG print management software. Includes Shodan dorks for target discovery and automated exploitation.
- CVE-2023-27350Exploit
Python 2.7
A simple python script to check if a service is vulnerable
Proof-of-concept exploit for CVE-2023-27350, a remote code execution vulnerability in PaperCut print management software, enabling unauthenticated attackers to execute arbitrary code on vulnerable servers.
CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.
MaanVader · multiple · Apr 25, 2023
MaanVader · multiple · May 23, 2023
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.