PaperCut

CISA has issued an urgent warning regarding a critical vulnerability in PaperCut NG/MF print management software that threat actors are actively exploiting in ransomware campaigns. The vulnerability, tracked as CVE-2023-2533, represents a significant security risk to organizations worldwide using the affected software versions. This security flaw, categorized under CWE-352, allows attackers to potentially alter security settings and execute arbitrary code on vulnerable systems under specific conditions. The vulnerability’s severity stems from its ability to enable remote code execution (RCE), making it an attractive target for cybercriminals seeking to establish persistent access to enterprise networks.

Source: https://cybersecuritynews.com/papercut-rce-vulnerability-exploited/

TPRM report: https://scoringcyber.rankiteo.com/company/papercut-software

"id": "pap242072925",
"linkid": "papercut-software",
"type": "Vulnerability",
"date": "7/2025",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Print Management',
                        'name': 'PaperCut',
                        'type': 'Software Vendor'}],
 'attack_vector': 'Cross-Site Request Forgery (CSRF)',
 'date_detected': '2025-07-28',
 'description': 'CISA has issued an urgent warning regarding a critical '
                'vulnerability in PaperCut NG/MF print management software '
                'that threat actors are actively exploiting in ransomware '
                'campaigns.',
 'impact': {'systems_affected': 'PaperCut NG/MF print management systems'},
 'motivation': 'Remote Code Execution (RCE)',
 'post_incident_analysis': {'corrective_actions': ['Apply vendor patches',
                                                   'Monitor PaperCut systems '
                                                   'for threats',
                                                   'Implement network '
                                                   'segmentation around print '
                                                   'management systems'],
                            'root_causes': 'CVE-2023-2533'},
 'recommendations': ['Immediately apply vendor patches',
                     'Monitor PaperCut systems for threats',
                     'Implement network segmentation around print management '
                     'systems'],
 'references': [{'source': 'CISA'}],
 'response': {'containment_measures': ['Apply vendor patches',
                                       'Monitor PaperCut systems for threats'],
              'enhanced_monitoring': 'Monitor for suspicious activities '
                                     'targeting PaperCut installations',
              'network_segmentation': 'Implement network segmentation around '
                                      'print management systems',
              'remediation_measures': ['Network segmentation around print '
                                       'management systems']},
 'title': 'Critical Vulnerability in PaperCut NG/MF Print Management Software',
 'type': 'Vulnerability Exploitation',
 'vulnerability_exploited': 'CVE-2023-2533'}