CyberzSOC

By chaining the vulnerabilities (CVE-2024-47076, CVE-2024-47175, CVE-2024-47176 and CVE-2024-47177) together, an attacker could potentially achieve remote code execution [1]. Exploitation of these vulnerabilities is possible through the following chain of events: 1. Attacker advertises a malicious IPP server, thereby provisioning a malicious printer. 4. A potential victim attempts to print using the malicious device. 5. Attempted printing allows the attacker to execute arbitrary code on the victim’s machine.