CVE-2017-2747

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-23 · updated 2026-06-17

Description

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

Affected products

HP 110 Firmware: through nexus_00_04_53.8
HP 310 Firmware: through nexus_01_12_00.10
HP 315 Firmware: through nexus_03_12_00.14
HP 330 Firmware: through nexus_01_12_00.10
HP 335 Firmware: through nexus_03_12_00.14
HP 360 Firmware: through nexus_01_12_00.10
HP 365 Firmware: through nexus_03_12_00.14
HP 370 Firmware: through nexus_01_12_00.10
HP 375 Firmware: through nexus_03_12_00.14
HP 560 Firmware: through storm_00_05_01.5
HP 570 Firmware: through storm_00_05_01.5
HP T1300 Firmware: through ig_11_00_00.09
HP T1500 Firmware: through mry_04_05_00.4
HP T1530 Firmware: through mry_04_05_00.4
HP T2300 Firmware: through ig_11_00_00.09
HP T2500 Firmware: through mry_04_05_00.4
HP T2530 Firmware: through mry_04_05_00.4
HP T3500 Firmware: through aeneas_03_04_00.8
HP T790 Firmware: through ig_11_00_00.09
HP T795 Firmware: through ig_11_00_00.09
HP T920 Firmware: through mry_04_05_00.4
HP T930 Firmware: through mry_04_05_00.4

References

Get alerted when CVE-2017-2747 or the next vulnerability affects your stack