CVE-2024-3037

Summary

CVE-2024-3037 is a newly disclosed vulnerability impacting PaperCut NG/MF on Windows servers with Web Print enabled. The issue allows an attacker with local access to the PaperCut server, such as a domain admin, to delete arbitrary files. This can lead to significant data loss and compromise of the affected system. The vulnerability is specific to PaperCut NG/MF on Windows and requires direct access to the server. No remote exploitation is possible. Users are strongly urged to apply the forthcoming patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.