CVE-2017-2743

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-23 · updated 2026-06-17
Weakness: CWE-79

Description

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.

Affected products

HP 2A68A Firmware: before 2308214_000911 — fixed in 2308214_000911
HP 2A69A Firmware: before 2308214_000911 — fixed in 2308214_000911
HP 2A70A Firmware: before 2308214_000911 — fixed in 2308214_000911
HP 2A71A Firmware: before 2308214_000911 — fixed in 2308214_000911
HP A2W75A Firmware: before 2308214_000928 — fixed in 2308214_000928
HP A2W76A Firmware: before 2308214_000928 — fixed in 2308214_000928
HP A2W77A Firmware: before 2308214_000930 — fixed in 2308214_000930
HP A2W78A Firmware: before 2308214_000930 — fixed in 2308214_000930
HP A2W79A Firmware: before 2308214_000930 — fixed in 2308214_000930
HP B3G85A Firmware: before 2308214_000912 — fixed in 2308214_000912
HP B5L04A Firmware: before 2308214_000902 — fixed in 2308214_000902
HP B5L05A Firmware: before 2308214_000902 — fixed in 2308214_000902
HP B5L07A Firmware: before 2308214_000902 — fixed in 2308214_000902
HP B5L23A Firmware: before 2308214_000907 — fixed in 2308214_000907
HP B5L24A Firmware: before 2308214_000907 — fixed in 2308214_000907
HP B5L25A Firmware: before 2308214_000907 — fixed in 2308214_000907
HP B5L26A Firmware: before 2308214_000907 — fixed in 2308214_000907
HP B5L46A Firmware: before 2308214_000909 — fixed in 2308214_000909
HP B5L47A Firmware: before 2308214_000909 — fixed in 2308214_000909
HP B5L48A Firmware: before 2308214_000909 — fixed in 2308214_000909
HP C2S11A Firmware: before 2308214_000906 — fixed in 2308214_000906
HP C2S12A Firmware: before 2308214_000906 — fixed in 2308214_000906
HP Cc419A Firmware: before 2308214_000901 — fixed in 2308214_000901
HP Cc420A Firmware: before 2308214_000901 — fixed in 2308214_000901
HP Cc421A Firmware: before 2308214_000901 — fixed in 2308214_000901
HP Cc522A Firmware: before 2308214_000932 — fixed in 2308214_000932
HP Cc523A Firmware: before 2308214_000932 — fixed in 2308214_000932
HP Cc524A Firmware: before 2308214_000932 — fixed in 2308214_000932
HP Cd644A Firmware: before 2308214_000925 — fixed in 2308214_000925
HP Cd645A Firmware: before 2308214_000925 — fixed in 2308214_000925

How to fix

Upgrade to a fixed version: HP 2A68A Firmware 2308214_000911; HP 2A69A Firmware 2308214_000911; HP 2A70A Firmware 2308214_000911; HP 2A71A Firmware 2308214_000911; HP A2W75A Firmware 2308214_000928; HP A2W76A Firmware 2308214_000928; HP A2W77A Firmware 2308214_000930; HP A2W78A Firmware 2308214_000930; HP A2W79A Firmware 2308214_000930; HP B3G85A Firmware 2308214_000912; HP B5L04A Firmware 2308214_000902; HP B5L05A Firmware 2308214_000902. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-2743 or the next vulnerability affects your stack