5.3

CVE-2024-47176: openprinting cups-browsed Binding to an Unrestricted IP Address

CVSS: 5.3v3.1MediumModified
AliasesSUSE-SU-2024:3523-1UBUNTU-CVE-2024-47176USN-7042-1
Published 26-09-2024Last modified 04-11-2025
Open JSON

Vulnerability summary

CVE-2024-47176 is a medium (CVSS 5.3) Binding to an Unrestricted IP Address vulnerability in openprinting cups-browsed. EPSS estimates a 50.60% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk
41/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
50.60%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits4github, reference, metasploit

Advisory lineage

Upstream 0 · Downstream 19 · Related 7
DLA-3905-1DSA-5778-1MGASA-2024-0327OPENSUSE-SU-2025:15563-1OPENSUSE-SU-2026:21850-1RHSA-2024:7346

Timeline

  1. 26-09-2024
    PublishedVulnerability first disclosed.
  2. 04-11-2025
    Last modifiedVulnerability information updated.

Description

CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

50.60%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 50.60% on 19-09-2026

19-09-202619-10-2026
EPSS score
50.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found
  • githubUnverified

    Cups Browsed

    Maturity: poc

  • referenceUnverified

    Exploit Reference (evilsocket.net)

    Maturity: unknown

  • MetasploitMetasploitremoteUnverified

    cups-browsed Information Disclosure

    auxiliary/scanner/misc/cups_browsed_info_disclosure

    Maturity: poc

Show all 4 exploits
  • MetasploitMetasploitremoteUnverified

    CUPS IPP Attributes LAN Remote Code Execution

    exploit/multi/misc/cups_ipp_remote_code_execution

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Suse15 products
  • cups-filters&distro=SUSE Enterprise Storage 7.1< 1.25.0-150200.3.16.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 1.25.0-150200.3.16.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 1.25.0-150200.3.16.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 1.25.0-150200.3.16.1
  • cups-filters&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 1.25.0-150200.3.16.1
Opensuse2 products
  • cups-filters&distro=openSUSE Leap 15.5< 1.25.0-150200.3.16.1
  • cups-filters&distro=openSUSE Leap 15.6< 1.25.0-150200.3.16.1
Ubuntu2 products
  • cups-browsed< 2.0.0-0ubuntu10.1 | < 2.0.0-0ubuntu10.2
  • cups-filters< 1.27.4-1ubuntu0.4 | < 1.28.15-0ubuntu1.4 | < 1.20.2-0ubuntu3.3+esm1 | < 1.8.3-2ubuntu3.5+esm2
Debian1 product
  • cups-filters< 1.28.17-3+deb12u1 | < 1.28.17-5
Openprinting1 product

5 vendors · 21 products

References

27 links
Show all 27 references