How severe is CVE-2014-2658?

CVE-2014-2658 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2014-2658 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-2658?

CVE-2014-2658 primarily affects Papercut Papercut Mf. In total, 28 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2014-2658?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2014-2658 published?

CVE-2014-2658 was published on 2014-04-28 and last updated on 2026-06-17.

CVE-2014-2658

CVE-2014-2658 is a medium-severity vulnerability in Papercut Papercut Mf with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 1% (68th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Papercut Papercut Mf
Published: 2014-04-28
Last modified: 2026-06-17

Description

Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors.

Frequently asked questions

What is CVE-2014-2658?: Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors.
How severe is CVE-2014-2658?: CVE-2014-2658 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2014-2658 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-2658?: CVE-2014-2658 primarily affects Papercut Papercut Mf. In total, 28 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2014-2658?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2014-2658 published?: CVE-2014-2658 was published on 2014-04-28 and last updated on 2026-06-17.

References

Affected products (28)

cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:12.0:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:12.1:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:12.2:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:12.3:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:12.4:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:12.5:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:13.0:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:13.1:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:13.2:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:13.3:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:13.4:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:13.5:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_mf:14.0:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:12.0:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:12.1:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:12.2:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:12.3:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:12.4:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:12.5:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:13.0:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:13.1:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:13.2:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:13.3:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:13.4:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:13.5:*:*:*:*:*:*:*
cpe:2.3:a:papercut:papercut_ng:14.0:*:*:*:*:*:*:*

More vulnerabilities in Papercut Papercut Mf

CVE-2023-39143 — Critical (CVSS 9.8): PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or…
CVE-2023-27350 — Critical (CVSS 9.8): This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5…
CVE-2019-12135 — Critical (CVSS 9.8): An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions…
CVE-2019-8948 — Critical (CVSS 9.8): PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
CVE-2024-1222 — High (CVSS 8.6): This allows attackers to use a maliciously formed API request to gain access to an API authorization level with…
CVE-2023-2533 — High (CVSS 8.4): A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific…

All CVEs affecting Papercut Papercut Mf →