CVE-2017-2741

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D

published January 23, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
85%
Percentile
99.7
In the wild
Unconfirmed
What it is

⚠️ A crafty flaw in HP printers could let attackers run their own code! Your office printer might be more than just a paper pusher. 😱 Think of your printer as a café where anyone could walk in and make their own drinks without asking. If the café owner doesn't check who enters, they might end up serving something dangerous! If exploited, this vulnerability could allow an attacker to execute arbitrary code on the device, which means they could potentially manipulate it to access sensitive data or disrupt operations. Thankfully, there's no known active exploitation—yet!

Put simply

Think of your printer as a café where anyone could walk in and make their own drinks without asking. If the café owner doesn't check who enters, they might end up serving something dangerous! This vulnerability affects HP PageWide and OfficeJet Pro Printers with firmware versions below 1708D, allowing unauthorized code execution due to insufficient security checks. An attacker could potentially gain control over the printer and execute harmful tasks.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the device, which means they could potentially manipulate it to access sensitive data or disrupt operations. Thankfully, there's no known active exploitation—yet! Update your printer firmware to version 1708D or later immediately to mitigate this vulnerability. Regularly check for firmware updates to ensure your device remains secure against potential threats. You've got this! 🔒 Keep your printers up to date and secure, and you'll be a security hero in your workplace!

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.84614 · 99.7th percentile
Published
2018-01-23T16:00Z
EPSS history
Timeline
  • 23 JAN 16:00Z
    A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D
    cvelistv5