CVE-2024-47176
Vulnerability data via CVEDB (Shodan)
CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
vuln:CVE-2024-47176product:"Openprinting Cups-browsed" version:"2.0.1"http.html:"Cups-browsed"More intel sources (5)
vuln:CVE-2024-47176vulnerabilities.cve_id: CVE-2024-47176CVE-2024-47176CVE-2024-47176"CVE-2024-47176" exploit -site:nvd.nist.gov