CVEvulnerability

CVE-2017-2747

7.8 HIGH Published 2018-01-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-01-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

Affected configurations

• hp t790 firmware (<= ig 11 00 00.09) • hp t795 firmware (<= ig 11 00 00.09) • hp t1300 firmware (<= ig 11 00 00.09) • hp t2300 firmware (<= ig 11 00 00.09) • hp t920 firmware (<= mry 04 05 00.4) • hp t930 firmware (<= mry 04 05 00.4) • hp t1500 firmware (<= mry 04 05 00.4) • hp t1530 firmware (<= mry 04 05 00.4) • hp t2500 firmware (<= mry 04 05 00.4) • hp t2530 firmware (<= mry 04 05 00.4) • hp t3500 firmware (<= aeneas 03 04 00.8) • hp 110 firmware (<= nexus 00 04 53.8) • hp 310 firmware (<= nexus 01 12 00.10) • hp 330 firmware (<= nexus 01 12 00.10) • hp 360 firmware (<= nexus 01 12 00.10) • hp 370 firmware (<= nexus 01 12 00.10) • hp 315 firmware (<= nexus 03 12 00.14) • hp 335 firmware (<= nexus 03 12 00.14) • hp 365 firmware (<= nexus 03 12 00.14) • hp 375 firmware (<= nexus 03 12 00.14) • hp 560 firmware (<= storm 00 05 01.5) • hp 570 firmware (<= storm 00 05 01.5)

References