Skip to main content

Papercut NG vulnerability

On April 21, 2023 Malwarebytes received reports indicating a vulnerability was discovered with the Papercut NG software which exposed unpatched environments. For more information, see PaperCut NG Vulnerability.

Environments

  • Windows

Cause

The specific flaw exists within the PaperCut NG software. The issue results from improper access control that allows remote attackers to bypass authentication on installations of PaperCut.

Resolution

PaperCut has issued an update to fix this vulnerability. For more information, see PaperCut MF/NG Vulnerability. 

Resolution 1

Use Malwarebytes Vulnerability and Patch Management to update the PaperCut software if you have the module. 

Resolution 2

Update PaperCut software manually on your endpoints.  

Resolution 3

Configure the Anti-exploit policy settings to shield endpoints from this vulnerability. 

  1. Sign in to Nebula or OneView. 
  2. On the left navigation menu, click Configure. 
  3. Click Policies. 
  4. Select a policy assigned to endpoints installed with PaperCut software. 
  5. Select the Protection Settings tab. 
  6. Under Exploit protection, click Advanced settings.
  7. Click Manage protected applications > Add. 
  8. Enter or select the following information:
    1. App Name: Papercut
    2. App File: pc-app.exe
    3. Program Type: MS Office
  9. Click Save > Close. 
  10. Then on the top right of your policy page, click Save. 

Related articles