• Operating system: Ubuntu 20.04
• Physical memory: 32GB
• Computer: x86-64 desktop with Intel 16-Core Processor

The fuzzing log will saved in fuzz_data folder. So we need to create a fuzz_data folder before running the fuzzer.

sudo apt update
sudo apt install snmp
pip install git+https://github.com/rytilahti/python-miio.git
cd bin && mkdir fuzz_data

Run the binary with following commands:

./netpuzz -p lpd -f lpd_template.xml -x lpd_reference.xml -t <printer_ip>
./netpuzz -p ipp -f ipp_template.xml -x ipp_reference.xml -t <printer_ip>

The following table list all the vulnerabilities we found in this work. We also recorded a demo video for each vulnerability. Since some of the vulnerabilities are not yet fixed, we masked the parts of the video that contains PoCs.