CVE-2023-4568— PaperCut NG Unauthenticated XMLRPC
Quick assessment
Affected
PaperCut PaperCut NG
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PaperCut NG是澳大利亚PaperCut公司的一套下一代打印机控制软件。 PaperCut NG 22.0.12及之前版本存在授权问题漏洞，该漏洞源于默认允许运行未经身份验证的XMLRPC命令。
Public Exploits 1
Nuclei · 1
CVE-2023-4568.yaml [template]
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-4568
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PaperCut NG Unauthenticated XMLRPC
Source: CVE Program / CVE List V5
Vulnerability Description
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
PaperCut NG 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PaperCut NG是澳大利亚PaperCut公司的一套下一代打印机控制软件。 PaperCut NG 22.0.12及之前版本存在授权问题漏洞，该漏洞源于默认允许运行未经身份验证的XMLRPC命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PaperCut | PaperCut NG | - | - |
|
II. Public POCs for CVE-2023-4568
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | PaperCut NG Unauthenticated XMLRPC Functionality | https://github.com/Cappricio-Securities/CVE-2023-4568 | POC Details |
| 2 | PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4568.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-4568
请登录查看更多情报信息。
Other References for CVE-2023-4568 (1)
IV. Related Vulnerabilities
Same vendor: PaperCut
-
CVE-2026-11744
PaperCut Hive Embedded App for Ricoh: Javascript injection -
CVE-2026-87739
PaperCut MF/NG: User permissions are not evaluated on report -
CVE-2026-82077
PaperCut NG/MF: Remote Code Execution via Scan2Fax -
CVE-2026-14780
PaperCut NG/MF: Remote Code Execution via Scripting Subsyste -
CVE-2026-82078
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Con
Same weakness: CWE-287
-
CVE-2026-107910
Authentication bypass in FalkorDB Bolt endpoint via fail-ope -
CVE-2026-105672
Unauthenticated JSON API Authorization Bypass Vulnerability -
CVE-2026-16823
Security vulnerabilities have been found in IBM Verify Ident -
CVE-2026-19491
Security vulnerabilities have been found in IBM Verify Ident -
CVE-2026-19494
Security vulnerabilities have been found in IBM Verify Ident
V. Comments for CVE-2023-4568
No comments yet