Summary:
PaperCut, a provider of print management software, is advising users to upgrade their software immediately since hackers are actively using flaws to gain access to servers. With all popular platforms and brands, PaperCut provides printing management software. While the official website claims it serves hundreds of millions of individuals from over 100 countries, it is used by big businesses, government agencies, and educational institutions. According to the company, it has received two cybersecurity concerns alerting it to two security problems, both of which have a high or critical severity and affect PaperCut MF/NG.[/subscribe_to_unlock_form]
Summary:
PaperCut, a provider of print management software, is advising users to upgrade their software immediately since hackers are actively using flaws to gain access to servers. With all popular platforms and brands, PaperCut provides printing management software. While the official website claims it serves hundreds of millions of individuals from over 100 countries, it is used by big businesses, government agencies, and educational institutions. According to the company, it has received two cybersecurity concerns alerting it to two security problems, both of which have a high or critical severity and affect PaperCut MF/NG.[emaillocker id="1283"]
Two issues are ZDI-CAN-189877/PO-1216: All PaperCut MF or NG versions 8.0 and later on all OS platforms, for both application and site servers, are affected by the unauthenticated remote code execution vulnerability. Critical (CVSS v3.1 score: 9.8). ZDI-CAN-19226/PO-1219: Application servers running all OS platforms and PaperCut MF or NG versions 15.0 or later are affected by the unauthenticated information leak bug. 8.2 (CVSS v3.1 score; high)
Recommendations:
We strongly recommend that you upgrade PaperCut MF and PaperCut NG to versions 20.1.7, 21.2.11, 22.0.9, and later.
References:
The following reports contain further technical details:
[/emaillocker]