PaperCut MF vulnerabilities

An unspecified vulnerability in the print release functionality in PaperCut MF before version 14.1 (Build 26983) may lead to unknown impact and remote attack vectors, related to embedded MFPs.

In the Shared Account Synchronization component of PaperCut MF (version 25.0.4), an authenticated user with administrative privileges can specify arbitrary local file paths due to lack of path validation. This allows enumeration of directory structures and unauthorized reading of sensitive configuration or system files, whose contents are then exposed in the account management interface.

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions, the server may incorrectly process fragmented data chunks, leading to the registration of a truncated badge ID string.