CVE-2024-8405 Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack

What is CVE-2024-8405?

CVE-2024-8405 is a medium-severity denial of service vulnerability in PaperCut NG, PaperCut MF, published on 26 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.

Note:

This CVE has been split from CVE-2024-4712.

Weakness: CWE-77

Which versions are affected by CVE-2024-8405?

It affects 2 products.

Products include Papercut Papercut Mf, Papercut Papercut Ng.

How do I fix CVE-2024-8405?

No fix has been published for CVE-2024-8405 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2024-8405 being exploited?

There is no known exploitation of CVE-2024-8405 in the wild and no public exploit code.

Other vulnerabilities in PaperCut NG, PaperCut MF

• CVE-2023-27350 PaperCut MF/NG Improper Access Control Exploited Critical 9.8
• CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Exploited Critical 9.4
• CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Exploited High 8.8
• CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Exploited High 8.4
• CVE-2023-27351 PaperCut NG/MF Improper Authentication Exploited High 8.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-frvp-fph6-68p5.