{"id":"CVE-2024-8405","aliases":["EUVD-2024-49152","GHSA-frvp-fph6-68p5"],"status":"published","title":"Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack","description":"An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.\n\nNote: \n\nThis CVE has been split from CVE-2024-4712.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00241,"percentile":0.15273,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77"],"published":"2024-09-26T01:36:26Z","modified":"2026-06-17T08:22:31Z","products":[{"vendor":"papercut","product":"papercut ng, papercut mf"},{"vendor":"papercut","product":"papercut_mf"},{"vendor":"papercut","product":"papercut_ng"}],"references":[{"url":"https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8405"},{"url":"https://www.papercut.com/kb/Main/Security-Bulletin-May-2024"},{"url":"https://github.com/advisories/GHSA-frvp-fph6-68p5"}],"sources":{"cve":[{"id":"CVE-2024-8405","title":"Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack","description":"An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.\n\nNote: \n\nThis CVE has been split from CVE-2024-4712.","status":"published","published":"2024-09-26T01:36:26.364Z","modified":"2024-09-26T15:02:10.145Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:34:09.216761Z"}],"euvd":[{"id":"EUVD-2024-49152","description":"An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.\n\nNote: \n\nThis CVE has been split from CVE-2024-4712.","status":"published","published":"2024-09-26T01:36:26Z","modified":"2024-09-26T15:02:10Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:09.516714Z"}],"ghsa":[{"id":"GHSA-frvp-fph6-68p5","title":"An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows...","description":"An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.\n\nNote: \n\nThis CVE has been split from CVE-2024-4712.","status":"published","published":"2024-09-26T03:30:40Z","modified":"2024-09-26T03:30:46Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:58:20.799511Z"}],"nvd":[{"id":"CVE-2024-8405","description":"An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack.\n\nNote: \n\nThis CVE has been split from CVE-2024-4712.","status":"published","published":"2024-09-26T02:15:03.007Z","modified":"2026-06-17T08:22:31.23Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:10:29.044588Z"}]}}