Login Request a demo
Critical severity · published Jan 23, 2018
CVE-2017-2741
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D
9.8
CVSS
84.6%
EPSS
No
On KEV
Description
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)84.6% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
D3q15a Firmware · HP
before 1708d · source: NVD
DF
D3q15b Firmware · HP
before 1708d · source: NVD
DF
D3q15d Firmware · HP
before 1708d · source: NVD
DF
D3q16a Firmware · HP
before 1708d · source: NVD
DF
D3q16b Firmware · HP
before 1708d · source: NVD
DF
D3q16c Firmware · HP
before 1708d · source: NVD
DF
D3q16d Firmware · HP
before 1708d · source: NVD
DF
D3q17a Firmware · HP
before 1708d · source: NVD
DF
D3q17c Firmware · HP
before 1708d · source: NVD
DF
D3q17d Firmware · HP
before 1708d · source: NVD
DF
D3q19a Firmware · HP
before 1708d · source: NVD
DF
D3q19d Firmware · HP
before 1708d · source: NVD
Affected product
DF
D3q15a Firmware
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2741
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2741
Vendor Advisory
https://support.hp.com/us-en/document/c05462914
Third Party Advisory
https://www.exploit-db.com/exploits/42176/
www.exploit-db.com
https://www.exploit-db.com/exploits/45273/
More from D3q15a Firmware
9.8
CVE-2019-10627
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size…
9.8
CVE-2018-5924
A security vulnerability has been identified with certain HP Inkjet printers
7.8
CVE-2018-5925
A security vulnerability has been identified with certain HP Inkjet printers
5.2
CVE-2019-6337
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert