[Update] Vulnerabilities affecting OpenPrinting CUPS (September 27, 2024)
[Update on October 10, 2024] On September 28, 2024, Elastic Security Labs released detection rules in the vendor's proprietary format (see Documentation section), which are confirmed by CERT-FR analyses for detecting known attacks. [Initial release] From...
CSIRTS triage
- What
- Multiple vulnerabilities have been identified in OpenPrinting CUPS.
- Who is affected
- Deployments of OpenPrinting CUPS are affected.
- Urgency
- Remediation is urgent due to the potential impact of the vulnerabilities.
- Action
- Review and apply necessary updates to OpenPrinting CUPS.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CUPS
Get an email when a new CUPS advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2024-ALE-012/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Exploitation likely imminentCVE-2024-47176EPSS puts this in the most-targeted tier (50.2% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99% of all scored CVEs.
- Exploitation likely imminentCVE-2024-47076EPSS puts this in the most-targeted tier (77.0% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99% of all scored CVEs.
- Exploitation likely imminentCVE-2024-47175EPSS puts this in the most-targeted tier (62.5% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2024-47176 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-47076 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-47175 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-47177 | coverage & exploitation status | NVD · CVE.org |
More from CERT-FR Alertes de sécurité
- unknown[Update] Vulnerability in Microsoft Exchange Server (May 15, 2026)2026-05-15
- unknownVulnerability in F5 BIG-IP Access Policy Manager (March 31, 2026)2026-03-31
- unknownAlert note – Targeting instant messaging accounts (March 20, 2026)2026-03-20
- unknown[Update] Vulnerability in Cisco Catalyst SD-WAN (February 25, 2026)2026-02-25
- unknown[Update] Multiple vulnerabilities in Ivanti Endpoint Manager Mobile (January 30, 2026)2026-01-30