vulnwire
9.8crit

CVE-2017-2741in critical feed3 exploits

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
82.3%
percentile 100%
Public exploits
3
Metasploit · Exploit-DB

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.

Exploit prediction (EPSS)

82.33% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/linux/misc/hp_jetdirect_path_traversal HP Jetdirect Path Traversal Arbitrary Code Execution · metasploit exploit, normal rank · 2017-04-05
  • EDB-45273 HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit) · remote · 2018-08-27
  • EDB-42176 HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution · remote · 2017-06-14

CVSS scores

Assigned byVersionScoreVector
NVD3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • HP Inc. HP PageWide Printers; HP OfficeJet Pro Printers

References

  • exploit-db.com /exploits/42176/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • exploit-db.com /exploits/45273/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • support.hp.com /us-en/document/c05462914 · vendor-advisory, x_refsource_HP, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.