---
title: "CVE-2024-47176: cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source"
url: https://erroneo.us/security/cve/CVE-2024-47176/
description: "CVE-2024-47176 (OpenPrinting cups-browsed): CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality…"
type: vulnerability-record
section: "Security Digest"
date_published: 2024-09-26
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2024-47176"
kev: false
cvss: 5.3
epss: 0.50605
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2024-47176: cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

**Signal:** High exploit likelihood. EPSS ranks it in the top 5% of all CVEs for likely exploitation in the next 30 days. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- Not in CISA KEV , but CISA’s SSVC assessment records a public proof-of-concept, so attack code exists.
- EPSS 50.6% , percentile 99: FIRST’s model estimates a 50.6% chance of exploitation activity in the next 30 days, higher than 99% of all scored CVEs (very high). EPSS is a probability, not a verdict.
- Remotely reachable with no login and no user interaction. If the vulnerable service is exposed to the internet, prioritize it.
- Editorial verdict: Check exposure. CUPS cups-browsed RCE Chain: Real, but Needs a Print Job — Not the internet-ending bug the pre-disclosure hype suggested: code runs only when someone prints to the rogue printer, as the unprivileged lp user; but nothing should expose UDP 631 to the internet, and exposed hosts can be abused for DDoS.

## What it is

CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDRANY:631, causing it to trust any packet from any source, and can cause the Get-Printer-Attributes IPP request to an attacker controlled URL. When combined with other vulnerabilities, such as CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177, an attacker can execute arbitrary commands remotely on the target machine without authentication when a malicious printer is printed to.

## Affected products (CVE record)

- OpenPrinting cups-browsed: <= 2.0.1

## Severity

- GitHub_M CVSS 3.1: 5.3 `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- CISA SSVC assessment: exploitation poc , automatable no , technical impact partial .
- FIRST EPSS (model of 2026-10-21): 50.60% probability of exploitation activity in the next 30 days; percentile 99.

## Sources

- [CVE.org record CVE-2024-47176](https://www.cve.org/CVERecord?id=CVE-2024-47176)
- [NVD entry CVE-2024-47176](https://nvd.nist.gov/vuln/detail/CVE-2024-47176)
- [github.com](https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8)
- [github.com](https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47)
- [github.com](https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5)
- [github.com](https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6)
- [github.com](https://github.com/OpenPrinting/cups-browsed/blob/master/daemon/cups-browsed.c#L13992)
- [cups.org](https://www.cups.org)
- [evilsocket.net](https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I)
- [openwall.com](http://www.openwall.com/lists/oss-security/2024/09/27/6)
- [github.com](https://github.com/OpenPrinting/cups-browsed/commit/1debe6b140c37e0aa928559add4abcc95ce54aa2)
- [security.netapp.com](https://security.netapp.com/advisory/ntap-20241011-0001/)
- [lists.debian.org](https://lists.debian.org/debian-lts-announce/2024/09/msg00048.html)
- [openwall.com](http://www.openwall.com/lists/oss-security/2025/09/11/2)

---
Source page: https://erroneo.us/security/cve/CVE-2024-47176/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt