CVE-2017-2750

—

CVSS 3.0

9.8 critical

EPSS

10%p95

Published

Jan 23, 2018 (Jan 23, 2018)

Modified

Jun 17, 2026

Description

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions.

Vendors: hp
Products: l2683a firmware, l2717a firmware, l2762a firmware, j7z13a firmware, z5g79a firmware, l3u42a firmware, j7z08a firmware, j7z14a firmware, z5g77a firmware, j7z03a firmware, j7z07a firmware, j7z05a firmware
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.9%)

In the news1 stories

Remotely Exploitable Flaw Found In HP Enterprise Printers—Patch Now

The Hacker NewsNov 23, 08:26 UTC · Nov 23, 2017Vulnerability CVE-2017-2750