CVE-2017-2741

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code...

Cross site scripting

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser...

CVE-2017-2740

A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device...

CVE-2017-2742

A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service...

CVE-2017-2745

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser...

CVE-2017-2740

CVE-2017-2740 affects the HP ThinPro operating system command line shell across multiple releases (4.4, 5.0, 5.1, 5.2, 5.2.1, 6.1). The vulnerability could enable local unauthorized elevation of privilege on HP thin client devices. HP and related records describe a privilege escalation via the Th...

CVE-2017-2744

HP Support Assistant (Windows) is affected by CVE-2017-2744, where an attacker could extract binaries into protected file-system locations. The issue affects the HP Support Assistant Framework prior to 12.7.26.1, enabling privilege escalation via manipulation of protected directories. HP’s adviso...

CVE-2017-2747

HP has identified a potential security vulnerability before IG110000.10 for DesignJet T790, T795, T1300, T2300, before MRY040500.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS030400.9 for DesignJet T3500, before NEXUS011200.11 for Latex 310, 330, 360, 370, before...

CVE-2017-2746

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to create a denial of service...

CVE-2017-2744

The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1...

CVE-2017-2743

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214000901, 2308214000900, and other firmware versions. The vulnerability could be exploited to perform ...

CVE-2017-2740

A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device...

CVE-2017-2741

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code...

CVE-2017-2750

CVE-2017-2750 , as documented across multiple feeds, concerns HP printers where the vulnerability stems from insufficient DLL signature validation in the HP “Solution” package. Affected models include HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise...

CVE-2017-2742

HP Web Jetadmin before 10.4 SR2 is vulnerable to a denial-of-service condition (CVE-2017-2742). The vulnerability is described across multiple sources as a DoS risk reachable over network (CVSS v3 base score 7.5, High). Affected component is HP Web Jetadmin software; the root cause is not explici...

CVE-2017-2750

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937578479, 2405087018548, and other firmware versions...

CVE-2017-2747

HP DesignJet printers (T790/T795/T1300/T2300; T920/T930/T1500/T1530/T2500/T2530; T3500; Latex 310/330/360/370/315/335/365/375; STORM_00_05_01.6; Latex 560/570; Latex 110) may expose SMTP server credentials used to receive/process printer emails. Root cause described as a vulnerability in SMTP cre...

CVE-2017-2742

A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service...

CVE-2017-2745

The CVE-2017-2745 entry concerns HP JetAdvantage Security Manager prior to version 3.0.1, which is susceptible to stored cross-site scripting (XSS). The vulnerability arises in the application’s handling of data in a way that could allow a malicious actor to inject and execute scripts in a user’s...

CVE-2017-2746

CVE-2017-2746 affects HP JetAdvantage Security Manager prior to 3.0.1. The vulnerability is a stored cross-site scripting that could allow a hacker to cause a denial of service. Remediation: HP 3.0.1 or later updates address this issue per HP documentation. No exploitation details are provided in...