CVE-2017-2747

HP DesignJet printers (T790/T795/T1300/T2300; T920/T930/T1500/T1530/T2500/T2530; T3500; Latex 310/330/360/370/315/335/365/375; STORM_00_05_01.6; Latex 560/570; Latex 110) may expose SMTP server credentials used to receive/process printer emails. Root cause described as a vulnerability in SMTP cre...

CVE-2017-2746

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to create a denial of service...

CVE-2017-2744

The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1...

CVE-2017-2742

HP Web Jetadmin before 10.4 SR2 is vulnerable to a denial-of-service condition (CVE-2017-2742). The vulnerability is described across multiple sources as a DoS risk reachable over network (CVSS v3 base score 7.5, High). Affected component is HP Web Jetadmin software; the root cause is not explici...

CVE-2017-2745

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser...

CVE-2017-2741

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code...

CVE-2017-2743

CVE-2017-2743 corresponds to a cross-site scripting (XSS) vulnerability in HP Enterprise LaserJet printers and MFPs, HP OfficeJet Enterprise Color printers and MFPs, and HP PageWide Color Printers and MPS. The issue affects multiple firmware series listed in HP’s advisory, with vulnerable compone...

CVE-2017-2744

HP Support Assistant (Windows) is affected by CVE-2017-2744, where an attacker could extract binaries into protected file-system locations. The issue affects the HP Support Assistant Framework prior to 12.7.26.1, enabling privilege escalation via manipulation of protected directories. HP’s adviso...

CVE-2017-2746

CVE-2017-2746 affects HP JetAdvantage Security Manager prior to 3.0.1. The vulnerability is a stored cross-site scripting that could allow a hacker to cause a denial of service. Remediation: HP 3.0.1 or later updates address this issue per HP documentation. No exploitation details are provided in...

CVE-2017-2745

The CVE-2017-2745 entry concerns HP JetAdvantage Security Manager prior to version 3.0.1, which is susceptible to stored cross-site scripting (XSS). The vulnerability arises in the application’s handling of data in a way that could allow a malicious actor to inject and execute scripts in a user’s...

HP Connected Backup 8.68.8.6 - Local Privilege Escalation

HP Connected Backup 8.68.8.6 - Local Privilege Escalation Tested on HP Connected Backup version 8.8.2.0 on Windows 7 x64 import os import sys import time import requests from bs4 import BeautifulSoup def sendrequestbody: url="http://localhost:16386/" headers = "Content-Type": "text/xml;...

PT-2018-7183

Name of the Vulnerable Software and Affected Versions: HP LaserJet Enterprise printers versions prior to 2308937 578479 HP PageWide Enterprise printers versions prior to 2308937 578479 HP LaserJet Managed printers versions prior to 2308937 578479 HP OfficeJet Enterprise printers versions prior to...

PT-2018-7178

Name of the Vulnerable Software and Affected Versions: HP Enterprise LaserJet Printers and MFPs versions prior to 2308214 000901 HP OfficeJet Enterprise Color Printers and MFP versions prior to 2308214 000901 HP PageWide Color Printers and MPS versions prior to 2308214 000901 Description: The iss...

CVE-2017-2740: Undefined Security Weakness

A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device...

CVE-2017-2750: Improper Input Validation

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937578479, 2405087018548, and other firmware versions...

PT-2018-7176

Name of the Vulnerable Software and Affected Versions: HP PageWide Printers versions prior to firmware 1708D HP OfficeJet Pro Printers versions prior to firmware 1708D Description: A potential security issue has been identified that could potentially be exploited to execute arbitrary code...

PT-2018-7177

Name of the Vulnerable Software and Affected Versions: HP Web Jetadmin versions prior to 10.4 SR2 Description: A potential security issue has been identified that could be exploited to create a denial of service. Recommendations: For HP Web Jetadmin versions prior to 10.4 SR2, update to version...

CVE-2017-2743: Improper Neutralization of Input During Web Page Generation

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214000901, 2308214000900, and other firmware versions. The vulnerability could be exploited to perform ...

PT-2018-7181

Name of the Vulnerable Software and Affected Versions: HP JetAdvantage Security Manager versions prior to 3.0.1 Description: The issue concerns potential security vulnerabilities that could be exploited to allow stored cross-site scripting, potentially leading to a denial of service...

HP Connected Backup 8.6/8.8.6 - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits Tested on HP Connected Backup version 8.8.2.0 on Windows 7 x64 import os import sys import time import requests from bs4 import BeautifulSoup def sendrequestbody: url="http://localhost:16386/" headers = "Content-Type": "text/xml;...