CVE-2017-2743

Published: Jan 23, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.

Affected (88)

Products: Hp: Cc419a Firmware, Cc420a Firmware, Cc421a Firmware, Ce709a Firmware, Ce708a Firmware, Ce707a Firmware, Ce503a Firmware, Ce504a Firmware, Ce738a Firmware, Ce989a Firmware, Ce990a Firmware, Ce991a Firmware, Ce992a Firmware, Ce993a Firmware, Ce994a Firmware, Ce995a Firmware, Ce996a Firmware, Cf081a Firmware, Cf082a Firmware, Cf083a Firmware, L2717a Firmware, Cd644a Firmware, Cd645a Firmware, Cf116a Firmware, Cf117a Firmware, Cc522a Firmware, Cc523a Firmware, Cc524a Firmware, Cf235a Firmware, Cf236a Firmware, Cf238a Firmware, Cd646a Firmware, Cf118a Firmware, Cf066a Firmware, Cf067a Firmware, Cf068a Firmware, Cf069a Firmware, D3l08a Firmware, D3l09a Firmware, D3l10a Firmware, A2w77a Firmware, A2w78a Firmware, A2w79a Firmware, A2w76a Firmware, A2w75a Firmware, D7p70a Firmware, D7p71a Firmware, Cf367a Firmware, Cz244a Firmware, Cz245a Firmware, B5l04a Firmware, B5l05a Firmware, B5l07a Firmware, C2s11a Firmware, C2s12a Firmware, J7x28a Firmware, B5l23a Firmware, B5l24a Firmware, B5l25a Firmware, B5l26a Firmware, E6b67a Firmware, E6b68a Firmware, E6b69a Firmware, E6b70a Firmware, E6b71a Firmware, E6b72a Firmware, E6b73a Firmware, B3g85a Firmware, B5l46a Firmware, B5l47a Firmware, B5l48a Firmware, 2a68a Firmware, 2a69a Firmware, 2a70a Firmware, 2a71a Firmware, F2a76a Firmware, F2a77a Firmware, F2a81a Firmware, G1w46a Firmware, G1w46v Firmware, G1w47a Firmware, G1w47v Firmware, L3u44a Firmware, G1w40a Firmware, G1w39a Firmware, G1w41a Firmware, L3u43a Firmware, L3u42a Firmware

88 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cc419a Firmware	Before 2308214_000901

Running on/with	Platform Versions
Hp Cc419a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cc420a Firmware	Before 2308214_000901

Running on/with	Platform Versions
Hp Cc420a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cc421a Firmware	Before 2308214_000901

Running on/with	Platform Versions
Hp Cc421a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce709a Firmware	Before 2308214_000900

Running on/with	Platform Versions
Hp Ce709a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce708a Firmware	Before 2308214_000900

Running on/with	Platform Versions
Hp Ce708a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce707a Firmware	Before 2308214_000900

Running on/with	Platform Versions
Hp Ce707a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce503a Firmware	Before 2308214_000904

Running on/with	Platform Versions
Hp Ce503a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce504a Firmware	Before 2308214_000904

Running on/with	Platform Versions
Hp Ce504a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce738a Firmware	Before 2308214_000904

Running on/with	Platform Versions
Hp Ce738a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce989a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce989a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce990a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce990a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce991a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce991a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce992a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce992a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce993a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce993a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce994a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce994a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce995a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce995a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ce996a Firmware	Before 2308214_000926

Running on/with	Platform Versions
Hp Ce996a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf081a Firmware	Before 2308214_000927

Running on/with	Platform Versions
Hp Cf081a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf082a Firmware	Before 2308214_000927

Running on/with	Platform Versions
Hp Cf082a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf083a Firmware	Before 2308214_000927

Running on/with	Platform Versions
Hp Cf083a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp L2717a Firmware	Before 2308214_000903

Running on/with	Platform Versions
Hp L2717a	All versions

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Hp Cd644a Firmware	Before 2308214_000925

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cd645a Firmware	Before 2308214_000925

Running on/with	Platform Versions
Hp Cd644a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf116a Firmware	Before 2308214_000913

Running on/with	Platform Versions
Hp Cf116a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf117a Firmware	Before 2308214_000913

Running on/with	Platform Versions
Hp Cf117a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cc522a Firmware	Before 2308214_000932

Running on/with	Platform Versions
Hp Cc522a	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cc523a Firmware	Before 2308214_000932

Running on/with	Platform Versions
Hp Cc523a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cc524a Firmware	Before 2308214_000932

Running on/with	Platform Versions
Hp Cc524a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf235a Firmware	Before 2308214_000922

Running on/with	Platform Versions
Hp Cf235a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf236a Firmware	Before 2308214_000922

Running on/with	Platform Versions
Hp Cf236a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf238a Firmware	Before 2308214_000922

Running on/with	Platform Versions
Hp Cf238a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cd646a Firmware	Before 2308214_000925

Running on/with	Platform Versions
Hp Cd646a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf118a Firmware	Before 2308214_000913

Running on/with	Platform Versions
Hp Cf118a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf066a Firmware	Before 2308214_000921

Running on/with	Platform Versions
Hp Cf066a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf067a Firmware	Before 2308214_000921

Running on/with	Platform Versions
Hp Cf067a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf068a Firmware	Before 2308214_000921

Running on/with	Platform Versions
Hp Cf068a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf069a Firmware	Before 2308214_000921

Running on/with	Platform Versions
Hp Cf069a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D3l08a Firmware	Before 2308214_000931

Running on/with	Platform Versions
Hp D3l08a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D3l09a Firmware	Before 2308214_000931

Running on/with	Platform Versions
Hp D3l09a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D3l10a Firmware	Before 2308214_000931

Running on/with	Platform Versions
Hp D3l10a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp A2w77a Firmware	Before 2308214_000930

Running on/with	Platform Versions
Hp A2w77a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp A2w78a Firmware	Before 2308214_000930

Running on/with	Platform Versions
Hp A2w78a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp A2w79a Firmware	Before 2308214_000930

Running on/with	Platform Versions
Hp A2w79a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp A2w76a Firmware	Before 2308214_000928

Running on/with	Platform Versions
Hp A2w76a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp A2w75a Firmware	Before 2308214_000928

Running on/with	Platform Versions
Hp A2w75a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D7p70a Firmware	Before 2308214_000928

Running on/with	Platform Versions
Hp D7p70a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D7p71a Firmware	Before 2308214_000928

Running on/with	Platform Versions
Hp D7p71a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cf367a Firmware	Before 2308214_000916

Running on/with	Platform Versions
Hp Cf367a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz244a Firmware	Before 2308214_000920

Running on/with	Platform Versions
Hp Cz244a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Cz245a Firmware	Before 2308214_000920

Running on/with	Platform Versions
Hp Cz245a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l04a Firmware	Before 2308214_000902

Running on/with	Platform Versions
Hp B5l04a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l05a Firmware	Before 2308214_000902

Running on/with	Platform Versions
Hp B5l05a	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l07a Firmware	Before 2308214_000902

Running on/with	Platform Versions
Hp B5l07a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp C2s11a Firmware	Before 2308214_000906

Running on/with	Platform Versions
Hp C2s11a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp C2s12a Firmware	Before 2308214_000906

Running on/with	Platform Versions
Hp C2s12a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J7x28a Firmware	Before _2308214_000912

Running on/with	Platform Versions
Hp J7x28a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l23a Firmware	Before 2308214_000907

Running on/with	Platform Versions
Hp B5l23a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l24a Firmware	Before 2308214_000907

Running on/with	Platform Versions
Hp B5l24a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l25a Firmware	Before 2308214_000907

Running on/with	Platform Versions
Hp B5l25a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l26a Firmware	Before 2308214_000907

Running on/with	Platform Versions
Hp B5l26a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp E6b67a Firmware	Before 2308214_000908

Running on/with	Platform Versions
Hp E6b67a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp E6b68a Firmware	Before 2308214_000908

Running on/with	Platform Versions
Hp E6b68a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp E6b69a Firmware	Before 2308214_000908

Running on/with	Platform Versions
Hp E6b69a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp E6b70a Firmware	Before 2308214_000908

Running on/with	Platform Versions
Hp E6b70a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp E6b71a Firmware	Before _2308214_000908

Running on/with	Platform Versions
Hp E6b71a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp E6b72a Firmware	Before 2308214_000908

Running on/with	Platform Versions
Hp E6b72a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp E6b73a Firmware	Before 2308214_000908

Running on/with	Platform Versions
Hp E6b73a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B3g85a Firmware	Before 2308214_000912

Running on/with	Platform Versions
Hp B3g85a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l46a Firmware	Before 2308214_000909

Running on/with	Platform Versions
Hp B5l46a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l47a Firmware	Before 2308214_000909

Running on/with	Platform Versions
Hp B5l47a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp B5l48a Firmware	Before 2308214_000909

Running on/with	Platform Versions
Hp B5l48a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 2a68a Firmware	Before 2308214_000911

Running on/with	Platform Versions
Hp 2a68a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 2a69a Firmware	Before 2308214_000911

Running on/with	Platform Versions
Hp 2a69a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 2a70a Firmware	Before 2308214_000911

Running on/with	Platform Versions
Hp 2a70a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp 2a71a Firmware	Before 2308214_000911

Running on/with	Platform Versions
Hp 2a71a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp F2a76a Firmware	Before 2308214_000905

Running on/with	Platform Versions
Hp F2a76a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp F2a77a Firmware	Before 2308214_000905

Running on/with	Platform Versions
Hp F2a77a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp F2a81a Firmware	Before 2308214_000905

Running on/with	Platform Versions
Hp F2a81a	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G1w46a Firmware	Before 2308214_000910

Running on/with	Platform Versions
Hp G1w46a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G1w46v Firmware	Before 2308214_000910

Running on/with	Platform Versions
Hp G1w46v	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G1w47a Firmware	Before 2308214_000910

Running on/with	Platform Versions
Hp G1w47a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G1w47v Firmware	Before 2308214_000910

Running on/with	Platform Versions
Hp G1w47v	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp L3u44a Firmware	Before 2308214_000910

Running on/with	Platform Versions
Hp L3u44a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G1w40a Firmware	Before 2308214_000923

Running on/with	Platform Versions
Hp G1w40a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G1w39a Firmware	Before 2308214_000923

Running on/with	Platform Versions
Hp G1w39a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G1w41a Firmware	Before 2308214_000923

Running on/with	Platform Versions
Hp G1w41a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp L3u43a Firmware	Before 2308214_000923

Running on/with	Platform Versions
Hp L3u43a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp L3u42a Firmware	Before 2308214_000923

Running on/with	Platform Versions
Hp L3u42a	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://support.hp.com/us-en/document/c05541569

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/us-en/document/c05541569

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.