{"id":"CVE-2017-2741","published":"2018-01-23T16:00:00Z","modified":"2024-09-17T03:48:54Z","title":"A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with…","vendor":"HP Inc.","product":"HP PageWide Printers; HP OfficeJet Pro Printers","tier":"core","eol":null,"affectedVersions":[{"vendor":"HP Inc.","product":"HP PageWide Printers; HP OfficeJet Pro Printers","versions":["before 1708D"]}],"description":{"text":"A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.","provenance":"source","from":"CVE.org"},"summary":{"text":"A potential security vulnerability exists in the firmware of HP PageWide Printers and HP OfficeJet Pro Printers, specifically in firmware versions before 1708D. The flaw could potentially be exploited to execute arbitrary code on the affected device.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:19:04Z"},"cvss":null,"epss":{"score":0.82327,"percentile":0.9966,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://www.exploit-db.com/exploits/42176/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://www.exploit-db.com/exploits/45273/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://support.hp.com/us-en/document/c05462914","tags":["vendor-advisory","x_refsource_HP"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-11884","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-11884","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":42176,"url":"https://www.exploit-db.com/exploits/42176","title":"HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution","type":"remote","platform":"hardware","date":"2017-06-14","verified":false,"provenance":"source"},{"id":45273,"url":"https://www.exploit-db.com/exploits/45273","title":"HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit)","type":"remote","platform":"unix","date":"2018-08-27","verified":true,"provenance":"source"},{"id":45273,"url":"https://www.exploit-db.com/exploits/45273","title":"HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit)","type":"remote","platform":"unix","date":"2018-08-27","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":3,"earliest":"2017-06-14"},"pocGithub":{"count":1,"skipped":0,"earliest":"2021-08-11","earliestUrl":"https://github.com/dopheide-esnet/zeek-jetdirect","repos":[{"name":"dopheide-esnet/zeek-jetdirect","url":"https://github.com/dopheide-esnet/zeek-jetdirect","stars":0,"created":"2021-08-11"}]},"metasploit":[{"name":"HP Jetdirect Path Traversal Arbitrary Code Execution","module":"exploit/linux/misc/hp_jetdirect_path_traversal","type":"exploit","disclosureDate":"2017-04-05","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hp_jetdirect_path_traversal.rb"}],"first":{"date":"2017-04-05","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hp_jetdirect_path_traversal.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/42176/","https://www.exploit-db.com/exploits/45273/"],"flow":[],"timeline":[{"date":"2017-04-05","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2017-06-14, PoC-in-GitHub 2021-08-11","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hp_jetdirect_path_traversal.rb","provenance":"source"},{"date":"2018-01-23","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-2741","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.93,"detail":"percentile 0.9966"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 NVD references tagged Exploit; 3 Exploit-DB entries; 1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}