CVE-2017-2750

N/A
Published: January 23, 2018 at 04:00 PM UTC
Updated: June 17, 2026 at 01:16 AM UTC
350 products affected across 1 vendorG1W40A FirmwareCF117A FirmwareB5L26A Firmware

Using HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers by HP Inc.?

Get instant alerts when new vulnerabilities affect HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 10%

Description

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 2308937_578494v < 2405129_000054
Affected range stops below 2308937_578494, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000054, so it looks safe — our inference, not a vendor statement
hp-a2w75a (same device)
v < 2308937_578494v < 2405129_000054
Affected range stops below 2308937_578494, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000054, so it looks safe — our inference, not a vendor statement
hp-a2w76a (same device)
v < 2308937_578499v < 2405129_000057
Affected range stops below 2308937_578499, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000057, so it looks safe — our inference, not a vendor statement
hp-a2w77a (same device)
v < 2308937_578499v < 2405129_000057
Affected range stops below 2308937_578499, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000057, so it looks safe — our inference, not a vendor statement
hp-a2w78a (same device)
v < 2308937_578499v < 2405129_000057
Affected range stops below 2308937_578499, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000057, so it looks safe — our inference, not a vendor statement
hp-a2w79a (same device)
v < 2308937_578479v < 2405129_000040
Affected range stops below 2308937_578479, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000040, so it looks safe — our inference, not a vendor statement
hp-b3g84a (same device)
v < 2308937_578479v < 2405129_000040
Affected range stops below 2308937_578479, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000040, so it looks safe — our inference, not a vendor statement
hp-b3g85a (same device)
v < 2308937_578479v < 2405129_000040
Affected range stops below 2308937_578479, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000040, so it looks safe — our inference, not a vendor statement
hp-b3g86a (same device)
v < 2308937_578483v < 2405129_000050
Affected range stops below 2308937_578483, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000050, so it looks safe — our inference, not a vendor statement
hp-b5l04a (same device)
v < 2308937_578483v < 2405129_000050
Affected range stops below 2308937_578483, so it looks safe — our inference, not a vendor statement
Affected range stops below 2405129_000050, so it looks safe — our inference, not a vendor statement
hp-b5l04v (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (2)

VDB Entryx_refsource_BIDThird Party Advisory
http://www.securityfocus.com/bid/101965
Vendor Advisoryx_refsource_HPMitigation
https://support.hp.com/us-en/document/c05839270

CVSS

Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card