Detections
Analytics
CVE-2024-47176
medium
Description
CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
From the Tenable Blog
CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Frequently Asked Questions About Common UNIX Printing System (CUPS) Vulnerabilities
Published: 2024-09-26
Frequently asked questions about multiple vulnerabilities in the Common UNIX Printing System (CUPS) that were disclosed as zero-days on September 26.
References
https://www.darkreading.com/vulnerabilities-threats/emerging-threats-vulnerabilities-prepare-2025
https://cloud.google.com/support/bulletins/index#gcp-2024-056
https://github.com/Stickxx00/Cups-RCE-Exploit
https://github.com/jimi2x/dirtycups
https://github.com/deancooreman/CVE-2024-47176
https://github.com/Sahil-Makhija/CVE-reports-from-Perplexity
https://github.com/0x7556/CVE-2024-47176
https://github.com/gianlu111/CUPS-CVE-2024-47176
https://github.com/AxthonyV/CVE-2024-47176
https://github.com/MalwareTech/CVE-2024-47176-Scanner
https://github.com/0xCZR1/PoC-Cups-RCE-CVE-exploit-chain
https://github.com/gumerzzzindo/CVE-2024-47176
https://github.com/l0n3m4n/CVE-2024-47176
https://github.com/pearlmansara/CVE-2024-47176-CUPS
https://github.com/nma-io/CVE-2024-47176
https://github.com/lkarlslund/jugular
https://github.com/aytackalinci/CVE-2024-47176
https://github.com/mr-r3b00t/CVE-2024-47176
https://github.com/workabhiwin09/CVE-2024-47176
https://github.com/referefref/cupspot-2024-47177
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I
https://security.netapp.com/advisory/ntap-20241011-0001/
https://lists.debian.org/debian-lts-announce/2024/09/msg00048.html
https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5
https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47
https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8
https://github.com/OpenPrinting/cups-browsed/commit/1debe6b140c37e0aa928559add4abcc95ce54aa2
https://github.com/OpenPrinting/cups-browsed/blob/master/daemon/cups-browsed.c#L13992
Details
Published: 2024-09-26
Updated: 2025-11-04
Risk Information
CVSS v2
Base Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
Severity: High
CVSS v3
Base Score: 5.3
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity: Medium
EPSS
EPSS: 0.50605
Vulnerability Watch
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability of Interest