CVE:CVE-2023-27350
CNNVD:CNNVD-202304-1720
PaperCut NG是澳大利亚PaperCut公司的一套下一代打印机控制软件。
PaperCut NG 22.0.5版本存在访问控制错误漏洞，该漏洞源于访问控制不当，攻击者利用该漏洞可以绕过身份验证并在系统上下文中执行任意代码。
solution:Upgrade papercut papercut_mf to a higher version than 20.1.7,21.2.11,22.0.9,and avoid the version [8.0.0,20.1.7),[21.0.0,21.2.11),[22.0.0,22.0.9); Upgrade papercut papercut_ng to a higher version than 20.1.7,21.2.11,22.0.9,and avoid the version [8.0.0,20.1.7),[21.0.0,21.2.11),[22.0.0,22.0.9)