CVE-2017-2747
High
Description
HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHp T790 Firmware
PublishedJan 23, 2018
First seenJan 23, 2018
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp t790_firmware | v ≤ ig_11_00_00.09 | — |
| hp t795_firmware | v ≤ ig_11_00_00.09 | — |
| hp t1300_firmware | v ≤ ig_11_00_00.09 | — |
| hp t2300_firmware | v ≤ ig_11_00_00.09 | — |
| hp t920_firmware | v ≤ mry_04_05_00.4 | — |
| hp t930_firmware | v ≤ mry_04_05_00.4 | — |
| hp t1500_firmware | v ≤ mry_04_05_00.4 | — |
| hp t1530_firmware | v ≤ mry_04_05_00.4 | — |
| hp t2500_firmware | v ≤ mry_04_05_00.4 | — |
| hp t2530_firmware | v ≤ mry_04_05_00.4 | — |
| hp t3500_firmware | v ≤ aeneas_03_04_00.8 | — |
| hp 110_firmware | v ≤ nexus_00_04_53.8 | — |
| hp 310_firmware | v ≤ nexus_01_12_00.10 | — |
| hp 330_firmware | v ≤ nexus_01_12_00.10 | — |
| hp 360_firmware | v ≤ nexus_01_12_00.10 | — |
| hp 370_firmware | v ≤ nexus_01_12_00.10 | — |
| hp 315_firmware | v ≤ nexus_03_12_00.14 | — |
| hp 335_firmware | v ≤ nexus_03_12_00.14 | — |
| hp 365_firmware | v ≤ nexus_03_12_00.14 | — |
| hp 375_firmware | v ≤ nexus_03_12_00.14 | — |
| hp 560_firmware | v ≤ storm_00_05_01.5 | — |
| hp 570_firmware | v ≤ storm_00_05_01.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.