Product: Print Deploy
Summary
PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF to simplify printer deployment and management. If not fully configured to use the trust database on clients, it can expose communication to man-in-the-middle attacks. Documentation related to SSL configuration was found lacking, which may lead to misconfigurations. PaperCut recommends using valid certificates and following updated documentation for proper SSL setup.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.7 | CVE-2025-9785 |
Exploitation
To exploit this vulnerability, an attacker can intercept communication between clients and the Print Deploy server if the system is configured with self-signed certificates and the trust database is not properly set up. By positioning themselves in the network, the attacker can perform man-in-the-middle attacks, allowing them to capture sensitive data or manipulate print jobs.
Affected Products
- PaperCut NG: A print management solution that helps organizations manage their printing needs.
- PaperCut MF: A comprehensive print management solution that includes additional features for managing multifunction devices.
Mitigation
To mitigate this vulnerability, users should ensure that they use valid SSL certificates instead of self-signed ones. It is crucial to follow the updated documentation provided by PaperCut to configure SSL correctly. Additionally, users should copy their Certification Authority certificate or self-signed certificate to the trust store of their operating system and the Java key store.