1. Home
  2. CVE Database
  3. CVE-2023-4568
MEDIUM · 6.5

CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor su...

Vulnerability Description

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
PapercutPapercut Ng<= 22.0.12

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2023-4568?

CVE-2023-4568 is a vulnerability with a CVSS score of 6.5 (MEDIUM). PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor su...

How severe is CVE-2023-4568?

CVE-2023-4568 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4568?

Check the references section above for vendor advisories and patch information. Affected products include: Papercut Papercut Ng.