4 ms·
Yeah tbh it's not as bad as he claimed. I doubt this is actually rated 9.9: >A remote unauthenticated attacker can silently replace existing printers’ (or inst
by NavinF 2y ago
Yeah tbh it's not as bad as he claimed. I doubt this is actually rated 9.9:
>A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print job is started (from that computer).
>WAN / public internet: a remote attacker sends an UDP packet to port 631. No authentication whatsoever.
>LAN: a local attacker can spoof zeroconf / mDNS / DNS-SD advertisements (we will talk more about this in the next writeup ) and achieve the same code path leading to RCE.
Still, sucks for linux desktop users. Looks like any random device on your wifi/vpn can screw you over
- floren 2y agoOr any malicious user on the airport wifi. The compromise will linger until however many weeks later when you decide to print something...
- bremac 2y agoKeep in mind that you still need send a print job to the fake printer to trigger the exploit. If you send the job to your real printer, nothing happens.
- crote 2y agoThe exploit allows an attacker to overwrite your real printer with their fake printer.
- graemep 2y agoNot using the "WAN" attack if you are using a firewall config that stops that on public wifi. I do not understand how the mDNS entry point works.
- rolph 2y agoi knew there was a reason i blacklist unsolicited/unauthenticated UDP inbound.
- deleted 2y ago[deleted]