1. Home
  2. CVE Database
  3. CVE-2017-2747
HIGH · 7.8

CVE-2017-2747

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AE...

Vulnerability Description

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HpT790 Firmware<= ig_11_00_00.09
HpT790-
HpT795 Firmware<= ig_11_00_00.09
HpT795-
HpT1300 Firmware<= ig_11_00_00.09
HpT1300-
HpT2300 Firmware<= ig_11_00_00.09
HpT2300-
HpT920 Firmware<= mry_04_05_00.4
HpT920-
HpT930 Firmware<= mry_04_05_00.4
HpT930-
HpT1500 Firmware<= mry_04_05_00.4
HpT1500-
HpT1530 Firmware<= mry_04_05_00.4
HpT1530-
HpT2500 Firmware<= mry_04_05_00.4
HpT2500-
HpT2530 Firmware<= mry_04_05_00.4
HpT2530-

References

FAQ

What is CVE-2017-2747?

CVE-2017-2747 is a vulnerability with a CVSS score of 7.8 (HIGH). HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AE...

How severe is CVE-2017-2747?

CVE-2017-2747 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2747?

Check the references section above for vendor advisories and patch information. Affected products include: Hp T790 Firmware, Hp T790, Hp T795 Firmware, Hp T795, Hp T1300 Firmware.