CVE-2024-1223
Published: 14 March 2024
Summary
CVE-2024-1223 is a medium-severity Exposure of Data Element to Wrong Session (CWE-488) vulnerability in Papercut Papercut Mf. Its CVSS base score is 4.8 (Medium).
Operationally, ranked at the 29.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-16990
Vulnerability details
This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful…
more
the system must be in a specific runtime state.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.