# N/A
## 概述
该漏洞允许远程攻击者绕过受影响版本的PaperCut NG 22.0.5 (Build 63914)的认证。由于存在访问控制不当的问题，攻击者可以利用此漏洞以系统权限执行任意代码，且无需身份验证。
## 影响版本
- PaperCut NG 22.0.5 (Build 63914)
## 细节
漏洞存在于SetupCompleted类中，由于访问控制措施不当，攻击者可以绕过认证并以SYSTEM权限执行任意代码。
## 影响
攻击者能够绕过认证机制，从而在系统上下文中执行任意代码。
是否为 Web 类漏洞： 是
判断理由：
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | A simple python script to check if a service is vulnerable | https://github.com/MaanVader/CVE-2023-27350-POC | POC详情 |
| 2 | None | https://github.com/0ximan1337/CVE-2023-27350-POC | POC详情 |
| 3 | Proof of Concept Exploit for PaperCut CVE-2023-27350 | https://github.com/horizon3ai/CVE-2023-27350 | POC详情 |
| 4 | Exploit for Papercut CVE-2023-27350. [+] Reverse shell [+] Mass checking | https://github.com/adhikara13/CVE-2023-27350 | POC详情 |
| 5 | Perfom With Massive Authentication Bypass In PaperCut MF/NG | https://github.com/ThatNotEasy/CVE-2023-27350 | POC详情 |
| 6 | Python 2.7 | https://github.com/Jenderal92/CVE-2023-27350 | POC详情 |
| 7 | None | https://github.com/imancybersecurity/CVE-2023-27350-POC | POC详情 |
| 8 | None | https://github.com/ASG-CASTLE/CVE-2023-27350 | POC详情 |
| 9 | None | https://github.com/rasan2001/CVE-2023-27350 | POC详情 |
| 10 | None | https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability | POC详情 |
| 11 | Unauthenticated remote command execution in Papercut service allows an attacker to execute commands due to improper access controls in the SetupCompleted Java class. | https://github.com/monke443/CVE-2023-27350 | POC详情 |
| 12 | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27350.yaml | POC详情 |
| 13 | PoC for CVE-2023-27350 | https://github.com/0xB0y426/CVE-2023-27350-PoC | POC详情 |
| 14 | Papercut Vulnerability, Affected Versions are PaperCut MF or NG version 8.0 or later (excluding patched versions) on all OS platforms. | https://github.com/Royall-Researchers/CVE-2023-27350 | POC详情 |
| 15 | PaperCut NG/MG Authentication Bypass and Remote Code Execution (RCE) Exploit Tool. A standalone Bash implementation of the PaperCut exploit chain, featuring optional proxy support, automated session elevation, and dynamic command injection via the print scripting engine. Designed for security auditing and authorized penetration testing. | https://github.com/dezso-dfield/CVE-2023-27350 | POC详情 |
暂无评论