--- title: "Another PaperCut: CVE-2023-39143 Remote Code Execution" description: Huntress is tracking a new PaperCut vulnerability, CVE-2023-39143, which allows full remote code execution on unpatched servers. image: https://www.huntress.com/hubfs/BlogHeader-ResponsetoIncidents-Another%20PaperCut.png --- [Skip to content](https://3911692.hs-sites.com/blog/another-papercut-cve-2023-39143-remote-code-execution#main-content) [Close ](https://3911692.hs-sites.com/blog/another-papercut-cve-2023-39143-remote-code-execution#) [![Huntress Logo Wide Teal](https://3911692.hs-sites.com/hs-fs/hubfs/Huntress%20Logo%20Wide%20Teal.png?width=193&height=41&name=Huntress%20Logo%20Wide%20Teal.png)](https://www.huntress.com) [Team Huntress](https://3911692.hs-sites.com/blog/author/team-huntress) 08.5.2023 1 min read # Another PaperCut: CVE-2023-39143 Remote Code Execution [Previous Post ](https://3911692.hs-sites.com/blog/legitimate-apps-as-traitorware-for-persistent-microsoft-365-compromise) [Next Post ](https://3911692.hs-sites.com/blog/beyond-antivirus-how-businesses-should-be-scaling-their-security) Share on Twitter Share on LinkedIn Share on Facebook Share on Reddit On August 5, Huntress was [made aware](https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/) of the recently uncovered vulnerability tracked as [CVE-2023-39143](https://nvd.nist.gov/vuln/detail/CVE-2023-39143). For overall statistics, in our partner base we have over 1,000 vulnerable servers across 812 different companies. We have begun outreach efforts to all of our partners. Our researchers are currently looking into the vulnerability so we can provide a deeper technical analysis and ideas for potential detection of exploits against the vulnerable versions. We will provide further updates to this blog and our [Reddit post](https://www.reddit.com/r/msp/comments/15iwjez/papercut_patch_party_cve202339143/) as we gather more information. In the meantime, here are some details to hopefully help you get started with patching and mitigation. ## Vulnerable Versions As of now, any Windows Papercut MF or NG server below version 22.1.3 is affected. Please follow the [patch guidance from Papercut](https://www.papercut.com/kb/Main/securitybulletinjuly2023/) as soon as possible to mitigate this vulnerability. Note that this patch is only available for servers of version 22 and onwards—patches are not available for older versions of this software.  ## Mitigation Tactics If you are unable to patch quickly, the next best mitigation is to ensure the server is not publicly accessible from the internet. This will not prevent lateral movement attacks from within your network, but it’s better than leaving your server completely open. This vulnerability can also be mitigated by disabling the external device integration setting. To do this, go to Options -> Advanced -> External Hardware Integration and uncheck “Enable external hardware integration”. Please ensure you review your environment before making this system change as it could limit functionality of Papercut server where you have already integrated external hardware. The preferred mitigation here is to patch ASAP. ![](https://lh3.googleusercontent.com/rctGf5wf78mKYDO6ccoaLJp87taZkbkoC2N0Z09jxR-V2EzvCVpdKqk1EzYmutOI7MywIopIp5io4DiufucPBOT67iQKU0zSicDggLyxfdcF8V7cU7rBSuGzWLo6vX25XFU-zRrsbAF6pZJBBxKPj8Q) ## What You Should Do Patch as soon as you can if you have a vulnerable version (see above); otherwise apply some mitigations.  As always, if you’d like to have someone else watching your back while you work on patching and/or mitigation, feel free to spin up a [free trial](http://www.huntress.com/trial/?utm_source=blog&utm_content=cve-papercut) with us so our 24/7 SOC can keep an eye out for you. *Thanks to Huntress team members Caleb Stewart, John Hammond, Sharon Martin, David Carter, Adam Rice and Anthony Smith, amongst many others for their contributions to this writeup and rapid response effort.* ![avatar](https://3911692.hs-sites.com/hs-fs/hubfs/Team-Huntress-Blog.png?width=290&height=290&name=Team-Huntress-Blog.png) #### [Team Huntress](https://3911692.hs-sites.com/blog/author/team-huntress) ## You May Also Like [ Team Huntress 11.10.2023 8 min read ## Critical Vulnerability: SysAid CVE-2023-47246 Huntress has analyzed the emerging SysAid CVE-2023-47246 vulnerability and recreated the ... Start Reading ](https://3911692.hs-sites.com/blog/critical-vulnerability-sysaid-cve-2023-47246) [ Team Huntress 11.9.2023 11 min read ## Bitter Pill: Third-Party Pharmaceutical Vendor Linked to Pharmacy and Health Clinic Cyberattack Huntress has uncovered a series of unauthorized access, revealing a threat actor using ... Start Reading ](https://3911692.hs-sites.com/blog/third-party-pharmaceutical-vendor-linked-to-pharmacy-and-health-clinic-cyberattack) [ Team Huntress 11.7.2023 6 min read ## Confluence to Cerber: Exploitation of ​​CVE-2023-22518 for Ransomware Deployment CVE-2023-22518 is being exploited in Confluence for Cerber ransomware deployment. Read up ... Start Reading ](https://3911692.hs-sites.com/blog/confluence-to-cerber-exploitation-of-cve-2023-22518-for-ransomware-deployment) [![Huntress](https://3911692.hs-sites.com/hubfs/Huntress-1.svg)](https://www.huntress.com) Deploy managed detection and response for endpoints and identities in minutes. [LinkedIn ](https://www.linkedin.com/company/huntress-labs/) [Twitter ](https://twitter.com/huntresslabs) [Facebook ](https://www.facebook.com/huntresslabs) [YouTube ](https://www.youtube.com/c/Huntress/featured) © 2026 Huntress - All rights reserved