Versions (4)
Version DetailsCurrent
Rev: 3 • Sep 26, 2024, 12:00 PMET INFO Observed UDP cups-browsed Add Printer Packet Inbound (IPP)
alert udp any any -> [$HOME_NET,$HTTP_SERVERS] 631 (msg:"ET INFO Observed UDP cups-browsed Add Printer Packet Inbound (IPP)"; content:"|20|"; within:3; content:"|20|ipp"; distance:1; within:7; fast_pattern; pcre:"/^(?:[A-Fa-f0-9]{1,2}\x20){2}ipps?\x3a\x2f\x2f/"; reference:cve,2024-47176; classtype:misc-activity; sid:2056211; rev:3; metadata:created_at 2024_09_26, cve CVE_2024_47176, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_09_27;)
Sep 26, 2024, 12:00 PM
Sep 27, 2024, 12:00 PM
Sep 26, 2024, 11:00 PM
Jul 23, 2025, 8:34 PM
rules/emerging-info.rules