CVE-2017-2747 | ByteOS Network

Vulnerability Details :

CVE-2017-2747

Assigner-hp

Assigner Org ID-74586083-13ce-40fd-b46a-8e5d23cfbcb2

Published At-23 Jan, 2018 | 16:00

Updated At-16 Sep, 2024 | 17:54

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:hp

Assigner Org ID:74586083-13ce-40fd-b46a-8e5d23cfbcb2

Published At:23 Jan, 2018 | 16:00

Updated At:16 Sep, 2024 | 17:54

▼CVE Numbering Authority (CNA)

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

Affected Products

Vendor

Product

HP Designjet printers; HP Latex printers

Versions

Affected

fixed in IG_11_00_00.10, MRY_04_05_00.5, and AENEAS_03_04_00.9
NEXUS_01_12_00.11, NEXUS_03_12_00.15, and STORM_00_05_01.6

Problem Types

Type	CWE ID	Description
text	N/A	expose credentials

Type: text

CWE ID: N/A

Description: expose credentials

References

Hyperlink	Resource
https://support.hp.com/us-en/document/c05624457	vendor-advisory x_refsource_HP

Hyperlink: https://support.hp.com/us-en/document/c05624457

Resource:

vendor-advisory

x_refsource_HP

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.hp.com/us-en/document/c05624457	vendor-advisory x_refsource_HP x_transferred

Hyperlink: https://support.hp.com/us-en/document/c05624457

Resource:

vendor-advisory

x_refsource_HP

x_transferred

▼National Vulnerability Database (NVD)

Source:hp-security-alert@hp.com

Published At:23 Jan, 2018 | 16:29

Updated At:03 Oct, 2019 | 00:03

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

>>t790_firmware>>Versions up to ig_11_00_00.09(inclusive)

cpe:2.3:o:hp:t790_firmware:*:*:*:*:*:*:*:*

>>t790>>-

cpe:2.3:h:hp:t790:-:*:*:*:*:*:*:*

>>t795_firmware>>Versions up to ig_11_00_00.09(inclusive)

cpe:2.3:o:hp:t795_firmware:*:*:*:*:*:*:*:*

>>t795>>-

cpe:2.3:h:hp:t795:-:*:*:*:*:*:*:*

>>t1300_firmware>>Versions up to ig_11_00_00.09(inclusive)

cpe:2.3:o:hp:t1300_firmware:*:*:*:*:*:*:*:*

>>t1300>>-

cpe:2.3:h:hp:t1300:-:*:*:*:*:*:*:*

>>t2300_firmware>>Versions up to ig_11_00_00.09(inclusive)

cpe:2.3:o:hp:t2300_firmware:*:*:*:*:*:*:*:*

>>t2300>>-

cpe:2.3:h:hp:t2300:-:*:*:*:*:*:*:*

>>t920_firmware>>Versions up to mry_04_05_00.4(inclusive)

cpe:2.3:o:hp:t920_firmware:*:*:*:*:*:*:*:*

>>t920>>-

cpe:2.3:h:hp:t920:-:*:*:*:*:*:*:*

>>t930_firmware>>Versions up to mry_04_05_00.4(inclusive)

cpe:2.3:o:hp:t930_firmware:*:*:*:*:*:*:*:*

>>t930>>-

cpe:2.3:h:hp:t930:-:*:*:*:*:*:*:*

>>t1500_firmware>>Versions up to mry_04_05_00.4(inclusive)

cpe:2.3:o:hp:t1500_firmware:*:*:*:*:*:*:*:*

>>t1500>>-

cpe:2.3:h:hp:t1500:-:*:*:*:*:*:*:*

>>t1530_firmware>>Versions up to mry_04_05_00.4(inclusive)

cpe:2.3:o:hp:t1530_firmware:*:*:*:*:*:*:*:*

>>t1530>>-

cpe:2.3:h:hp:t1530:-:*:*:*:*:*:*:*

>>t2500_firmware>>Versions up to mry_04_05_00.4(inclusive)

cpe:2.3:o:hp:t2500_firmware:*:*:*:*:*:*:*:*

>>t2500>>-

cpe:2.3:h:hp:t2500:-:*:*:*:*:*:*:*

>>t2530_firmware>>Versions up to mry_04_05_00.4(inclusive)

cpe:2.3:o:hp:t2530_firmware:*:*:*:*:*:*:*:*

>>t2530>>-

cpe:2.3:h:hp:t2530:-:*:*:*:*:*:*:*

>>t3500_firmware>>Versions up to aeneas_03_04_00.8(inclusive)

cpe:2.3:o:hp:t3500_firmware:*:*:*:*:*:*:*:*

>>t3500>>-

cpe:2.3:h:hp:t3500:-:*:*:*:*:*:*:*

>>110_firmware>>Versions up to nexus_00_04_53.8(inclusive)

cpe:2.3:o:hp:110_firmware:*:*:*:*:*:*:*:*

>>110>>-

cpe:2.3:h:hp:110:-:*:*:*:*:*:*:*

>>310_firmware>>Versions up to nexus_01_12_00.10(inclusive)

cpe:2.3:o:hp:310_firmware:*:*:*:*:*:*:*:*

>>310>>-

cpe:2.3:h:hp:310:-:*:*:*:*:*:*:*

>>330_firmware>>Versions up to nexus_01_12_00.10(inclusive)

cpe:2.3:o:hp:330_firmware:*:*:*:*:*:*:*:*

>>330>>-

cpe:2.3:h:hp:330:-:*:*:*:*:*:*:*

>>360_firmware>>Versions up to nexus_01_12_00.10(inclusive)

cpe:2.3:o:hp:360_firmware:*:*:*:*:*:*:*:*

>>360>>-

cpe:2.3:h:hp:360:-:*:*:*:*:*:*:*

>>370_firmware>>Versions up to nexus_01_12_00.10(inclusive)

cpe:2.3:o:hp:370_firmware:*:*:*:*:*:*:*:*

>>370>>-

cpe:2.3:h:hp:370:-:*:*:*:*:*:*:*

>>315_firmware>>Versions up to nexus_03_12_00.14(inclusive)

cpe:2.3:o:hp:315_firmware:*:*:*:*:*:*:*:*

>>315>>-

cpe:2.3:h:hp:315:-:*:*:*:*:*:*:*

>>335_firmware>>Versions up to nexus_03_12_00.14(inclusive)

cpe:2.3:o:hp:335_firmware:*:*:*:*:*:*:*:*

>>335>>-

cpe:2.3:h:hp:335:-:*:*:*:*:*:*:*

>>365_firmware>>Versions up to nexus_03_12_00.14(inclusive)

cpe:2.3:o:hp:365_firmware:*:*:*:*:*:*:*:*

>>365>>-

cpe:2.3:h:hp:365:-:*:*:*:*:*:*:*

>>375_firmware>>Versions up to nexus_03_12_00.14(inclusive)

cpe:2.3:o:hp:375_firmware:*:*:*:*:*:*:*:*

>>375>>-

cpe:2.3:h:hp:375:-:*:*:*:*:*:*:*

>>560_firmware>>Versions up to storm_00_05_01.5(inclusive)

cpe:2.3:o:hp:560_firmware:*:*:*:*:*:*:*:*

>>560>>-

cpe:2.3:h:hp:560:-:*:*:*:*:*:*:*

>>570_firmware>>Versions up to storm_00_05_01.5(inclusive)

cpe:2.3:o:hp:570_firmware:*:*:*:*:*:*:*:*

>>570>>-

cpe:2.3:h:hp:570:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.hp.com/us-en/document/c05624457	hp-security-alert@hp.com	Vendor Advisory

Hyperlink: https://support.hp.com/us-en/document/c05624457

Source: hp-security-alert@hp.com

Resource:

Vendor Advisory

Similar CVEs

52Records found

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 16.13%

||

7 Day CHG~0.00%

Published-01 Feb, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user.

Vendor-Linux Kernel Organization, Inc Oracle Corporation HP Inc.IBM Corporation Microsoft Corporation

Product-bigfix_inventory license_metric_tool aix solaris hp-ux linux_kernel windows BigFix Inventory

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-5.5||MEDIUM

EPSS-0.26% / 48.63%

||

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 03:34

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

Vendor-HP Inc.Hewlett Packard Enterprise (HPE)

Product-sitescope SiteScope