SMTP credential vulnerability in multiple HP products

HP DesignJet T790 and others are printer devices from Hewlett-Packard HP in the United States. An SMTP credential vulnerability exists in several HP products. An attacker can exploit this vulnerability to obtain credentials for an SMTP server...

HP Printers Information Disclosure Vulnerability (Jan 2018)

Multiple HP Printers may expose the credentials of the SMTP server configured to receive and process emails generated by the printers. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-2750

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937578479, 2405087018548, and other firmware versions...

CVE-2017-2750

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937578479, 2405087018548, and other firmware versions...

CVE-2017-2743

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214000901, 2308214000900, and other firmware versions. The vulnerability could be exploited to perform ...

CVE-2017-2747

HP has identified a potential security vulnerability before IG110000.10 for DesignJet T790, T795, T1300, T2300, before MRY040500.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS030400.9 for DesignJet T3500, before NEXUS011200.11 for Latex 310, 330, 360, 370, before...

CVE-2017-2743

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214000901, 2308214000900, and other firmware versions. The vulnerability could be exploited to perform ...

CVE-2017-2747

HP has identified a potential security vulnerability before IG110000.10 for DesignJet T790, T795, T1300, T2300, before MRY040500.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS030400.9 for DesignJet T3500, before NEXUS011200.11 for Latex 310, 330, 360, 370, before...

Code injection

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code...

Code injection

HP has identified a potential security vulnerability before IG110000.10 for DesignJet T790, T795, T1300, T2300, before MRY040500.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS030400.9 for DesignJet T3500, before NEXUS011200.11 for Latex 310, 330, 360, 370, before...

Authorization

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937578479, 2405087018548, and other firmware versions...

CVE-2017-2741

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code...

CVE-2017-2743

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214000901, 2308214000900, and other firmware versions. The vulnerability could be exploited to perform ...

CVE-2017-2743

CVE-2017-2743 corresponds to a cross-site scripting (XSS) vulnerability in HP Enterprise LaserJet printers and MFPs, HP OfficeJet Enterprise Color printers and MFPs, and HP PageWide Color Printers and MPS. The issue affects multiple firmware series listed in HP’s advisory, with vulnerable compone...

CVE-2017-2750

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937578479, 2405087018548, and other firmware versions...

CVE-2017-2747

HP DesignJet printers (T790/T795/T1300/T2300; T920/T930/T1500/T1530/T2500/T2530; T3500; Latex 310/330/360/370/315/335/365/375; STORM_00_05_01.6; Latex 560/570; Latex 110) may expose SMTP server credentials used to receive/process printer emails. Root cause described as a vulnerability in SMTP cre...

CVE-2017-2741

CVE-2017-2741 affects HP PageWide Printers and HP OfficeJet Pro Printers with firmware before 1708D. The issue enables arbitrary code execution via a Jetdirect path-traversal vulnerability. Exploitation involves writing a startup script to /etc/profile.d and triggering a reboot, enabling code exe...

CVE-2017-2741

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code...

HPSBPI03574 rev. 2 - WPA, WPA2 Key Reinstallation Attacks (KRACK attacks) Potential Remote Disclosure of Information: Certain HP Enterprise Printer and MFP products, Certain HP PageWide Printer and MFP Products, HP Jetdirect Accessory Products

Potential Security Impact Remote disclosure of information. Source:Mathy Vanhoef of imec-DistriNet, KU Leuven VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP Printers and MFPs, and HP JetDirect Networking accessories using WPA or WPA2. This vulnerabili...

ADRecon - Tool Which Gathers Information About The Active Directory

ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...