Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-47176— cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

Quick assessment

Affected
OpenPrinting cups-browsed
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

cups是cups开源的一个类 Unix 操作系统的组合式印刷系统。 cups存在安全漏洞，该漏洞源于cups-browsed绑定到INADDR_ANY:631，导致它信任来自任何来源的任何数据包，并可能导致向攻击者控制的 URL 发出Get-Printer-Attributes IPP 请求。

CVSS 5.3 · Medium EPSS 50.60% · P99
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-47176

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
Source: CVE Program / CVE List V5
Vulnerability Description
CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1327
Source: CVE Program / CVE List V5
Vulnerability Title
cups 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
cups是cups开源的一个类 Unix 操作系统的组合式印刷系统。 cups存在安全漏洞，该漏洞源于cups-browsed绑定到INADDR_ANY:631，导致它信任来自任何来源的任何数据包，并可能导致向攻击者控制的 URL 发出Get-Printer-Attributes IPP 请求。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
OpenPrinting cups-browsed <= 2.0.1 -

II. Public POCs for CVE-2024-47176

# POC Description Source Link Shenlong Link
1 POC scanner for CVE-2024-47176 https://github.com/GO0dspeed/spill POC Details
2 CUPS Browsd Check_CVE-2024-47176 https://github.com/workabhiwin09/CVE-2024-47176 POC Details
3 Scanner for the CUPS vulnerability CVE-2024-47176 https://github.com/tonyarris/CVE-2024-47176-Scanner POC Details
4 Scanner https://github.com/mr-r3b00t/CVE-2024-47176 POC Details
5 Vulnerability Scanner for CUPS: CVE-2024-47176 https://github.com/aytackalinci/CVE-2024-47176 POC Details
6 A simple CVE-2024-47176 (cups_browsed) check tool written in go. https://github.com/nma-io/CVE-2024-47176 POC Details
7 None https://github.com/pearlmansara/CVE-2024-47176-CUPS POC Details
8 Unauthenticated RCE on cups-browsed (exploit and nuclei template) https://github.com/l0n3m4n/CVE-2024-47176 POC Details
9 None https://github.com/gumerzzzindo/CVE-2024-47176 POC Details
10 A simple scanner for identifying vulnerable cups-browsed instances on your network https://github.com/MalwareTech/CVE-2024-47176-Scanner POC Details
11 This repository contains a scanner for detecting vulnerabilities in the cups-browsed service of CUPS (Common Unix Printing System). The vulnerability CVE-2024-47176 allows a remote attacker to exploit an insecure configuration of the daemon, potentially leading to arbitrary code execution. https://github.com/AxthonyV/CVE-2024-47176 POC Details
12 A Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running the Common Unix Printing System (CUPS). https://github.com/gianlu335/CUPS-CVE-2024-47176 POC Details
13 A Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running the Common Unix Printing System (CUPS). https://github.com/gianlu111/CUPS-CVE-2024-47176 POC Details
14 Unix CUPS打印系统 远程代码执行漏洞 https://github.com/0x7556/CVE-2024-47176 POC Details
15 CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDR_ANY-631, causing it to trust any packet from any source, and can cause the Get-Printer-Attributes IPP request to an attacker controlled URL. Due to the service binding to *-631 ( INADDR_ANY ), multiple bugs in cups-browsed can be exploited in sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an attacker to execute arbitrary commands remotely on the target machine without authentication when a print job is started. This poses a significant security risk over the network. Notably, this vulnerability is particularly concerning as it can be exploited from the public internet, potentially exposing a vast number of systems to remote attacks if their CUPS services are enabled. https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-47176.yaml POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-47176

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-47176 (4)

Vendor Pages for CVE-2024-47176 (1)

Other References for CVE-2024-47176 (2)

Same Patch Batch · OpenPrinting · 2024-09-26 · 3 CVEs total

CVE-2024-47076 8.6 HIGH libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an
CVE-2024-47175 8.6 HIGH libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the

IV. Related Vulnerabilities

Same vendor: OpenPrinting
Same weakness: CWE-1327

V. Comments for CVE-2024-47176

No comments yet

Leave a comment