CVE-2024-3496

CVE-2024-3496 describes a critical authentication bypass vulnerability affecting specific printer models, allowing unauthenticated attackers on the local network to gain full access to the printer's system information and upload malicious drivers. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the adjacent network (AV:A, AC:L, PR:N, UI:N) and can lead to high impact on confidentiality, integrity, and availability (C:H, I:H, A:H). While there is no evidence of active exploitation (KEV: No) or public exploit code (Metasploit, Nuclei, ExploitDB: None), the low EPSS score suggests a low probability of exploitation in the wild. Despite the lack of current exploitation, the severity of the vulnerability necessitates prompt patching of affected devices.