CVE-2017-2743

CVSS V2 Medium 4.3 CVSS V3 Medium 6.1
Description
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
Overview
  • CVE ID
  • CVE-2017-2743
  • Assigner
  • hp-security-alert@hp.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2018-01-23T16:29:01
  • Last Modified Date
  • 2018-02-13T17:46:54
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:hp:cc419a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000901
cpe:2.3:h:hp:cc419a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cc420a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000901
cpe:2.3:h:hp:cc420a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cc421a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000901
cpe:2.3:h:hp:cc421a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce709a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000900
cpe:2.3:h:hp:ce709a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce708a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000900
cpe:2.3:h:hp:ce708a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce707a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000900
cpe:2.3:h:hp:ce707a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce503a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000904
cpe:2.3:h:hp:ce503a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce504a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000904
cpe:2.3:h:hp:ce504a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce738a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000904
cpe:2.3:h:hp:ce738a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce989a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce989a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce990a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce990a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce991a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce991a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce992a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce992a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce993a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce993a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce994a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce994a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce995a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce995a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:ce996a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000926
cpe:2.3:h:hp:ce996a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf081a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000927
cpe:2.3:h:hp:cf081a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf082a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000927
cpe:2.3:h:hp:cf082a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf083a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000927
cpe:2.3:h:hp:cf083a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:l2717a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000903
cpe:2.3:h:hp:l2717a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cd644a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000925
cpe:2.3:h:hp:cd644a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cd645a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000925
cpe:2.3:h:hp:cd644a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf116a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000913
cpe:2.3:h:hp:cf116a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf117a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000913
cpe:2.3:h:hp:cf117a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cc522a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000932
cpe:2.3:h:hp:cc522a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cc523a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000932
cpe:2.3:h:hp:cc523a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cc524a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000932
cpe:2.3:h:hp:cc524a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf235a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000922
cpe:2.3:h:hp:cf235a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf236a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000922
cpe:2.3:h:hp:cf236a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf238a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000922
cpe:2.3:h:hp:cf238a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cd646a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000925
cpe:2.3:h:hp:cd646a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf118a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000913
cpe:2.3:h:hp:cf118a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf066a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000921
cpe:2.3:h:hp:cf066a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf067a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000921
cpe:2.3:h:hp:cf067a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf068a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000921
cpe:2.3:h:hp:cf068a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf069a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000921
cpe:2.3:h:hp:cf069a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:d3l08a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000931
cpe:2.3:h:hp:d3l08a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:d3l09a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000931
cpe:2.3:h:hp:d3l09a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:d3l10a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000931
cpe:2.3:h:hp:d3l10a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:a2w77a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000930
cpe:2.3:h:hp:a2w77a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:a2w78a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000930
cpe:2.3:h:hp:a2w78a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:a2w79a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000930
cpe:2.3:h:hp:a2w79a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:a2w76a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000928
cpe:2.3:h:hp:a2w76a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:a2w75a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000928
cpe:2.3:h:hp:a2w75a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:d7p70a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000928
cpe:2.3:h:hp:d7p70a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:d7p71a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000928
cpe:2.3:h:hp:d7p71a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cf367a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000916
cpe:2.3:h:hp:cf367a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cz244a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000920
cpe:2.3:h:hp:cz244a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:cz245a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000920
cpe:2.3:h:hp:cz245a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l04a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000902
cpe:2.3:h:hp:b5l04a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l05a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000902
cpe:2.3:h:hp:b5l05a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l07a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000902
cpe:2.3:h:hp:b5l07a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:c2s11a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000906
cpe:2.3:h:hp:c2s11a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:c2s12a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000906
cpe:2.3:h:hp:c2s12a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:j7x28a_firmware:*:*:*:*:*:*:*:* 1 OR _2308214_000912
cpe:2.3:h:hp:j7x28a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l23a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000907
cpe:2.3:h:hp:b5l23a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l24a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000907
cpe:2.3:h:hp:b5l24a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l25a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000907
cpe:2.3:h:hp:b5l25a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l26a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000907
cpe:2.3:h:hp:b5l26a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:e6b67a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000908
cpe:2.3:h:hp:e6b67a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:e6b68a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000908
cpe:2.3:h:hp:e6b68a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:e6b69a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000908
cpe:2.3:h:hp:e6b69a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:e6b70a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000908
cpe:2.3:h:hp:e6b70a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:e6b71a_firmware:*:*:*:*:*:*:*:* 1 OR _2308214_000908
cpe:2.3:h:hp:e6b71a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:e6b72a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000908
cpe:2.3:h:hp:e6b72a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:e6b73a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000908
cpe:2.3:h:hp:e6b73a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b3g85a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000912
cpe:2.3:h:hp:b3g85a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l46a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000909
cpe:2.3:h:hp:b5l46a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l47a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000909
cpe:2.3:h:hp:b5l47a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:b5l48a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000909
cpe:2.3:h:hp:b5l48a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:2a68a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000911
cpe:2.3:h:hp:2a68a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:2a69a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000911
cpe:2.3:h:hp:2a69a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:2a70a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000911
cpe:2.3:h:hp:2a70a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:2a71a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000911
cpe:2.3:h:hp:2a71a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:f2a76a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000905
cpe:2.3:h:hp:f2a76a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:f2a77a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000905
cpe:2.3:h:hp:f2a77a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:f2a81a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000905
cpe:2.3:h:hp:f2a81a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:g1w46a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000910
cpe:2.3:h:hp:g1w46a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:g1w46v_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000910
cpe:2.3:h:hp:g1w46v:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:g1w47a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000910
cpe:2.3:h:hp:g1w47a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:g1w47v_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000910
cpe:2.3:h:hp:g1w47v:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:l3u44a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000910
cpe:2.3:h:hp:l3u44a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:g1w40a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000923
cpe:2.3:h:hp:g1w40a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:g1w39a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000923
cpe:2.3:h:hp:g1w39a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:g1w41a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000923
cpe:2.3:h:hp:g1w41a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:l3u43a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000923
cpe:2.3:h:hp:l3u43a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:l3u42a_firmware:*:*:*:*:*:*:*:* 1 OR 2308214_000923
cpe:2.3:h:hp:l3u42a:-:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:N/I:P/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • NONE
  • Base Score
  • 4.3
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 2.9
CVSS Version 3
  • Version
  • 3.0
  • Vector String
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • REQUIRED
  • Scope
  • CHANGED
  • Confidentiality Impact
  • LOW
  • Availability Impact
  • NONE
  • Base Score
  • 6.1
  • Base Severity
  • MEDIUM
  • Exploitability Score
  • 2.8
  • Impact Score
  • 2.7
References
Reference URL Reference Tags
https://support.hp.com/us-en/document/c05541569 Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2017-2743
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2743
History
Created Old Value New Value Data Type Notes
2022-05-10 18:48:49 Added to TrackCVE
2022-12-03 01:25:07 2018-01-23T16:29Z 2018-01-23T16:29:01 CVE Published Date updated
2022-12-03 01:25:08 2018-02-13T17:46:54 CVE Modified Date updated
2022-12-03 01:25:08 Analyzed Vulnerability Status updated