Netskope Threat Labs

SERVER-WEBAPP PaperCut MF/NG PrintScript remote code execution attempt

IPS-NPA

1 SID: 61678

First seen
February 2024
Last seen
April 2025

Detects an attempt to exploit CVE-2023-27350, CVE-2023-2533, and CVE-2023-39649, a remote code execution flaw that can run code on the server in PaperCut MF/NG PrintScript. The flaw saw mass exploitation to deploy webshells and ransomware on exposed print management servers.