What’s Vulnerable › Vulnerabilities

CVE-2017-2750

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-23 · updated 2026-06-17
• Weakness: CWE-20

Description

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions.

Affected products

• HP A2W75A Firmware: before 2405129_000054; before 2308937_578494 — fixed in 2308937_578494, 2405129_000054
• HP A2W76A Firmware: before 2405129_000054; before 2308937_578494 — fixed in 2308937_578494, 2405129_000054
• HP A2W77A Firmware: before 2405129_000057; before 2308937_578499 — fixed in 2308937_578499, 2405129_000057
• HP A2W78A Firmware: before 2405129_000057; before 2308937_578499 — fixed in 2308937_578499, 2405129_000057
• HP A2W79A Firmware: before 2405129_000057; before 2308937_578499 — fixed in 2308937_578499, 2405129_000057
• HP B3G84A Firmware: before 2405129_000040; before 2308937_578479 — fixed in 2308937_578479, 2405129_000040
• HP B3G85A Firmware: before 2308937_578479; before 2405129_000040 — fixed in 2308937_578479, 2405129_000040
• HP B3G86A Firmware: before 2405129_000040; before 2308937_578479 — fixed in 2308937_578479, 2405129_000040
• HP B5L04A Firmware: before 2405129_000050; before 2308937_578483 — fixed in 2308937_578483, 2405129_000050
• HP B5L04V Firmware: before 2405129_000050; before 2308937_578483 — fixed in 2308937_578483, 2405129_000050
• HP B5L05A Firmware: before 2405129_000050; before 2308937_578483 — fixed in 2308937_578483, 2405129_000050
• HP B5L05V Firmware: before 2405129_000050; before 2308937_578483 — fixed in 2308937_578483, 2405129_000050
• HP B5L06A Firmware: before 2405129_000050; before 2308937_578483 — fixed in 2308937_578483, 2405129_000050
• HP B5L06V Firmware: before 2405129_000050; before 2308937_578483 — fixed in 2308937_578483, 2405129_000050
• HP B5L07A Firmware: before 2405129_000050; before 2308937_578483 — fixed in 2308937_578483, 2405129_000050
• HP B5L23A Firmware: before 2308937_57848 — fixed in 2308937_57848
• HP B5L24A Firmware: before 2308937_57848 — fixed in 2308937_57848
• HP B5L25A Firmware: before 2308937_57848 — fixed in 2308937_57848
• HP B5L26A Firmware: before 2308937_57848 — fixed in 2308937_57848
• HP B5L46A Firmware: before 2405129_000038; before 2308937_578488 — fixed in 2308937_578488, 2405129_000038
• HP B5L47A Firmware: before 2405129_000038; before 2308937_578488 — fixed in 2308937_578488, 2405129_000038
• HP B5L48A Firmware: before 2405129_000038; before 2308937_578488 — fixed in 2308937_578488, 2405129_000038
• HP B5L49A Firmware: before 2405129_000038; before 2308937_578488 — fixed in 2308937_578488, 2405129_000038
• HP B5L50A Firmware: before 2405129_000038; before 2308937_578488 — fixed in 2308937_578488, 2405129_000038
• HP B5L54A Firmware: before 2405129_000038; before 2308937_578488 — fixed in 2308937_578488, 2405129_000038
• HP C2S11A Firmware: before 2308937_578482 — fixed in 2308937_578482
• HP C2S11V Firmware: before 2308937_578482 — fixed in 2308937_578482
• HP C2S12A Firmware: before 2308937_578482 — fixed in 2308937_578482
• HP C2S12V Firmware: before 2308937_578482 — fixed in 2308937_578482
• HP Cc419A Firmware: before 2308937_578507 — fixed in 2308937_578507

How to fix

Upgrade to a fixed version: HP A2W75A Firmware 2308937_578494, 2405129_000054; HP A2W76A Firmware 2308937_578494, 2405129_000054; HP A2W77A Firmware 2308937_578499, 2405129_000057; HP A2W78A Firmware 2308937_578499, 2405129_000057; HP A2W79A Firmware 2308937_578499, 2405129_000057; HP B3G84A Firmware 2308937_578479, 2405129_000040; HP B3G85A Firmware 2308937_578479, 2405129_000040; HP B3G86A Firmware 2308937_578479, 2405129_000040; HP B5L04A Firmware 2308937_578483, 2405129_000050; HP B5L04V Firmware 2308937_578483, 2405129_000050; HP B5L05A Firmware 2308937_578483, 2405129_000050; HP B5L05V Firmware 2308937_578483, 2405129_000050. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/101965
• https://support.hp.com/us-en/document/c05839270
• http://www.securityfocus.com/bid/101965
• https://support.hp.com/us-en/document/c05839270

Get alerted when CVE-2017-2750 or the next vulnerability affects your stack