CVE-2017-2741 : A potential security vulnerability has been identified with HP PageWide Printers

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.

Published 2018-01-23 16:29:01

Updated 2019-10-03 00:03:26

Source HP Inc.

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2017-2741

HP » J6u57b Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j6u57b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u57b » Version: N/A
HP » J9v82a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j9v82a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v82a » Version: N/A
HP » J9v82b Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j9v82b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v82b » Version: N/A
HP » J9v82c Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j9v82c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v82c » Version: N/A
HP » J9v82d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j9v82d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v82d » Version: N/A
HP » J6u55a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j6u55a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u55a » Version: N/A
HP » J6u55b Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j6u55b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u55b » Version: N/A
HP » J6u55c Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j6u55c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u55c » Version: N/A
HP » J6u55d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j6u55d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J6u55d » Version: N/A
HP » J9v80a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j9v80a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v80a » Version: N/A
HP » J9v80b Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j9v80b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J9v80b » Version: N/A
HP » D3q15a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q15a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q15a » Version: N/A
HP » D3q15b Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q15b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q15b » Version: N/A
HP » D3q15d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q15d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q15d » Version: N/A
HP » D3q17a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q17a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q17a » Version: N/A
HP » D3q17c Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q17c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q17c » Version: N/A
HP » D3q17d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q17d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q17d » Version: N/A
HP » D3q19a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q19a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q19a » Version: N/A
HP » D3q19d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q19d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q19d » Version: N/A
HP » D3q20a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q20a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20a » Version: N/A
HP » D3q20b Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q20b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20b » Version: N/A
HP » D3q20c Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q20c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20c » Version: N/A
HP » D3q20d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q20d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q20d » Version: N/A
HP » D3q21a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q21a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q21a » Version: N/A
HP » D3q21c Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q21c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q21c » Version: N/A
HP » D3q21d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q21d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q21d » Version: N/A
HP » K9z76a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:k9z76a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » K9z76a » Version: N/A
HP » K9z76d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:k9z76d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » K9z76d » Version: N/A
HP » D3q16a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q16a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q16a » Version: N/A
HP » D3q16b Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q16b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q16b » Version: N/A
HP » D3q16c Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q16c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q16c » Version: N/A
HP » D3q16d Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d3q16d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D3q16d » Version: N/A
HP » D9l63a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D9l63a » Version: N/A
HP » D9l64a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D9l64a » Version: N/A
HP » T0g70a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » T0g70a » Version: N/A
HP » J3p68a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J3p68a » Version: N/A
HP » D9l20a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d9l20a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D9l20a » Version: N/A
HP » D9l21a Firmware
Versions before (<) 1708d
cpe:2.3:o:hp:d9l21a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » D9l21a » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2017-2741

EPSS FAQ

96.40%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2017-2741

HP Jetdirect Path Traversal Arbitrary Code Execution

Disclosure Date: 2017-04-05

First seen: 2020-04-26

exploit/linux/misc/hp_jetdirect_path_traversal

The module exploits a path traversal via Jetdirect to gain arbitrary code execution by writing a shell script that is loaded on startup to /etc/profile.d. Then, the printer is restarted using SNMP. Impacted printers: HP PageWide Managed MFP P57750dw HP PageWi

More information

CVSS scores for CVE-2017-2741

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2017-2741

https://support.hp.com/us-en/document/c05462914

HPSBPI03555 rev. 2 - HP PageWide Printers, HP OfficeJet Pro Printers, Arbitrary Code Execution | HP® Customer Support
Vendor Advisory
https://www.exploit-db.com/exploits/45273/

HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit)
https://www.exploit-db.com/exploits/42176/

HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2017-2741

Products affected by CVE-2017-2741

Exploit prediction scoring system (EPSS) score for CVE-2017-2741

Metasploit modules for CVE-2017-2741

HP Jetdirect Path Traversal Arbitrary Code Execution

CVSS scores for CVE-2017-2741

References for CVE-2017-2741