CVE-2024-47176
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. `cups-browsed` binds to `INADDR_ANY:631`, causing it to trust any packet from any source, and can cause the `Get-Printer-Attributes` IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.
Official description from the CVE record, published by GitHub_M. Copyright © 1999-2026 The MITRE Corporation. See /security/cve/legal for the CVE license. View the record on cve.org
Key data
CVSS 3.1 Medium 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector: Network
The vulnerable component can be reached over a network, possibly from the Internet.
Attack complexity: Low
No special conditions are needed. The attack can be repeated at will.
Privileges required: None
No account or privileges are needed.
User interaction: None
No action from any user is needed.
Scope: Unchanged
The impact stays within the vulnerable component.
Confidentiality impact: None
No effect on the secrecy of data.
Integrity impact: Low
Limited effect on the trustworthiness of data.
Availability impact: None
No effect on availability.
| Metric | Value | What it means |
|---|---|---|
| Attack vector | Network | The vulnerable component can be reached over a network, possibly from the Internet. |
| Attack complexity | Low | No special conditions are needed. The attack can be repeated at will. |
| Privileges required | None | No account or privileges are needed. |
| User interaction | None | No action from any user is needed. |
| Scope | Unchanged | The impact stays within the vulnerable component. |
| Confidentiality impact | None | No effect on the secrecy of data. |
| Integrity impact | Low | Limited effect on the trustworthiness of data. |
| Availability impact | None | No effect on availability. |
CVSS is owned and managed by FIRST.Org, Inc. (FIRST) and is used by permission. Each CVSS score on this site is shown together with its vector string, as published in the CVE record by the source named next to it. Learn more at first.org/cvss.
EPSS
- Score
- 0.50605 (50.6% probability)
- Percentile
- 98.9%
- Scores of
- Nov 10, 2026
- Model
- v2026.06.15
CISA assessment as of Sep 27, 2024
- Exploitation
- Public proof of concept recorded by CISA
- Automatable
- no
- Technical impact
- partial
Weakness (CWE)
- CWE-1327Binding to an Unrestricted IP Address
Affected products
OpenPrinting cups-browsed
- affected: <= 2.0.1
References
- github.com/OpenPrinting/cups-browsed/security/advisories/GH…
- github.com/OpenPrinting/cups-filters/security/advisories/GH…
- github.com/OpenPrinting/libcupsfilters/security/advisories/…
- github.com/OpenPrinting/libppd/security/advisories/GHSA-7xf…
- github.com/OpenPrinting/cups-browsed/blob/master/daemon/cup…
- cups.org
- evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-P…
- openwall.com/lists/oss-security/2024/09/27/6
- github.com/OpenPrinting/cups-browsed/commit/1debe6b140c37e0…
- security.netapp.com/advisory/ntap-20241011-0001
- lists.debian.org/debian-lts-announce/2024/09/msg00048.html
- openwall.com/lists/oss-security/2025/09/11/2
Timeline
- ID reserved
- Record published
- Record last updated
Look up another CVE
About CubePath
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Data as of Nov 10, 2026, 19:51 UTC. Sources and licenses