Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know

wiz.io | vulnerability | #cloud | #rce | #linux | #vulnerability | #cups | #ipp | #cve-2024-47176

Summary

Four CUPS/IPP flaws—CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, and CVE-2024-47177—let an unauthenticated attacker install a malicious printer via UDP port 631 and run commands on print jobs; patching is advised despite low cloud risk.
Published
Collected

original ↗

Related coverage

  1. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  2. Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise (wiz.io)
  3. RCE vulnerability in OpenSSH: everything you need to know (wiz.io)
  4. Backdoor in XZ Utils allows RCE: everything you need to know (wiz.io)
  5. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  6. Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments (wiz.io)

back