Details of VAR-201801-0997

ID

VAR-201801-0997

CVE

CVE-2017-2743

TITLE

plural HP Cross-site scripting vulnerability in printer product firmware

Trust: 0.8

sources: JVNDB: JVNDB-2017-012252

DESCRIPTION

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack. plural HP Printer product firmware contains a cross-site scripting vulnerability.Information may be obtained and information may be altered. HPColorLaserJetCM4540MFPCC419A and so on are all HP (HP) printer equipment. A cross-site scripting vulnerability exists in several HP products. A remote attacker can exploit this vulnerability to inject arbitrary web scripts or HTML. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks

Trust: 2.52

sources: NVD: CVE-2017-2743 // JVNDB: JVNDB-2017-012252 // CNVD: CNVD-2018-04189 // BID: 102836 // VULMON: CVE-2017-2743

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2018-04189

AFFECTED PRODUCTS

vendor:	hp	model:	e6b68a	scope:	lt	version:	2308214_000908	Trust: 1.0
vendor:	hp	model:	d7p71a	scope:	lt	version:	2308214_000928	Trust: 1.0
vendor:	hp	model:	c2s11a	scope:	lt	version:	2308214_000906	Trust: 1.0
vendor:	hp	model:	g1w40a	scope:	lt	version:	2308214_000923	Trust: 1.0
vendor:	hp	model:	cf067a	scope:	lt	version:	2308214_000921	Trust: 1.0
vendor:	hp	model:	b5l46a	scope:	lt	version:	2308214_000909	Trust: 1.0
vendor:	hp	model:	cz245a	scope:	lt	version:	2308214_000920	Trust: 1.0
vendor:	hp	model:	2a71a	scope:	lt	version:	2308214_000911	Trust: 1.0
vendor:	hp	model:	ce707a	scope:	lt	version:	2308214_000900	Trust: 1.0
vendor:	hp	model:	e6b69a	scope:	lt	version:	2308214_000908	Trust: 1.0
vendor:	hp	model:	f2a77a	scope:	lt	version:	2308214_000905	Trust: 1.0
vendor:	hp	model:	cf235a	scope:	lt	version:	2308214_000922	Trust: 1.0
vendor:	hp	model:	a2w75a	scope:	lt	version:	2308214_000928	Trust: 1.0
vendor:	hp	model:	c2s12a	scope:	lt	version:	2308214_000906	Trust: 1.0
vendor:	hp	model:	cf082a	scope:	lt	version:	2308214_000927	Trust: 1.0
vendor:	hp	model:	cf083a	scope:	lt	version:	2308214_000927	Trust: 1.0
vendor:	hp	model:	2a69a	scope:	lt	version:	2308214_000911	Trust: 1.0
vendor:	hp	model:	b3g85a	scope:	lt	version:	2308214_000912	Trust: 1.0
vendor:	hp	model:	b5l23a	scope:	lt	version:	2308214_000907	Trust: 1.0
vendor:	hp	model:	e6b73a	scope:	lt	version:	2308214_000908	Trust: 1.0
vendor:	hp	model:	b5l48a	scope:	lt	version:	2308214_000909	Trust: 1.0
vendor:	hp	model:	cf066a	scope:	lt	version:	2308214_000921	Trust: 1.0
vendor:	hp	model:	e6b67a	scope:	lt	version:	2308214_000908	Trust: 1.0
vendor:	hp	model:	cf117a	scope:	lt	version:	2308214_000913	Trust: 1.0
vendor:	hp	model:	e6b70a	scope:	lt	version:	2308214_000908	Trust: 1.0
vendor:	hp	model:	ce995a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	ce994a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	2a68a	scope:	lt	version:	2308214_000911	Trust: 1.0
vendor:	hp	model:	ce989a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	cf236a	scope:	lt	version:	2308214_000922	Trust: 1.0
vendor:	hp	model:	ce503a	scope:	lt	version:	2308214_000904	Trust: 1.0
vendor:	hp	model:	cz244a	scope:	lt	version:	2308214_000920	Trust: 1.0
vendor:	hp	model:	cd645a	scope:	lt	version:	2308214_000925	Trust: 1.0
vendor:	hp	model:	cc419a	scope:	lt	version:	2308214_000901	Trust: 1.0
vendor:	hp	model:	ce990a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	cf238a	scope:	lt	version:	2308214_000922	Trust: 1.0
vendor:	hp	model:	ce709a	scope:	lt	version:	2308214_000900	Trust: 1.0
vendor:	hp	model:	l3u43a	scope:	lt	version:	2308214_000923	Trust: 1.0
vendor:	hp	model:	d3l10a	scope:	lt	version:	2308214_000931	Trust: 1.0
vendor:	hp	model:	cf367a	scope:	lt	version:	2308214_000916	Trust: 1.0
vendor:	hp	model:	d7p70a	scope:	lt	version:	2308214_000928	Trust: 1.0
vendor:	hp	model:	ce738a	scope:	lt	version:	2308214_000904	Trust: 1.0
vendor:	hp	model:	l3u44a	scope:	lt	version:	2308214_000910	Trust: 1.0
vendor:	hp	model:	g1w39a	scope:	lt	version:	2308214_000923	Trust: 1.0
vendor:	hp	model:	e6b71a	scope:	lt	version:	_2308214_000908	Trust: 1.0
vendor:	hp	model:	a2w76a	scope:	lt	version:	2308214_000928	Trust: 1.0
vendor:	hp	model:	b5l04a	scope:	lt	version:	2308214_000902	Trust: 1.0
vendor:	hp	model:	cc522a	scope:	lt	version:	2308214_000932	Trust: 1.0
vendor:	hp	model:	cd644a	scope:	lt	version:	2308214_000925	Trust: 1.0
vendor:	hp	model:	ce996a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	cf068a	scope:	lt	version:	2308214_000921	Trust: 1.0
vendor:	hp	model:	b5l47a	scope:	lt	version:	2308214_000909	Trust: 1.0
vendor:	hp	model:	b5l26a	scope:	lt	version:	2308214_000907	Trust: 1.0
vendor:	hp	model:	g1w41a	scope:	lt	version:	2308214_000923	Trust: 1.0
vendor:	hp	model:	f2a76a	scope:	lt	version:	2308214_000905	Trust: 1.0
vendor:	hp	model:	g1w46a	scope:	lt	version:	2308214_000910	Trust: 1.0
vendor:	hp	model:	g1w46v	scope:	lt	version:	2308214_000910	Trust: 1.0
vendor:	hp	model:	cf118a	scope:	lt	version:	2308214_000913	Trust: 1.0
vendor:	hp	model:	ce708a	scope:	lt	version:	2308214_000900	Trust: 1.0
vendor:	hp	model:	b5l25a	scope:	lt	version:	2308214_000907	Trust: 1.0
vendor:	hp	model:	g1w47a	scope:	lt	version:	2308214_000910	Trust: 1.0
vendor:	hp	model:	ce993a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	d3l08a	scope:	lt	version:	2308214_000931	Trust: 1.0
vendor:	hp	model:	d3l09a	scope:	lt	version:	2308214_000931	Trust: 1.0
vendor:	hp	model:	ce992a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	cc421a	scope:	lt	version:	2308214_000901	Trust: 1.0
vendor:	hp	model:	a2w79a	scope:	lt	version:	2308214_000930	Trust: 1.0
vendor:	hp	model:	f2a81a	scope:	lt	version:	2308214_000905	Trust: 1.0
vendor:	hp	model:	l3u42a	scope:	lt	version:	2308214_000923	Trust: 1.0
vendor:	hp	model:	cc524a	scope:	lt	version:	2308214_000932	Trust: 1.0
vendor:	hp	model:	cc420a	scope:	lt	version:	2308214_000901	Trust: 1.0
vendor:	hp	model:	l2717a	scope:	lt	version:	2308214_000903	Trust: 1.0
vendor:	hp	model:	cf081a	scope:	lt	version:	2308214_000927	Trust: 1.0
vendor:	hp	model:	cf116a	scope:	lt	version:	2308214_000913	Trust: 1.0
vendor:	hp	model:	cd646a	scope:	lt	version:	2308214_000925	Trust: 1.0
vendor:	hp	model:	g1w47v	scope:	lt	version:	2308214_000910	Trust: 1.0
vendor:	hp	model:	b5l07a	scope:	lt	version:	2308214_000902	Trust: 1.0
vendor:	hp	model:	cf069a	scope:	lt	version:	2308214_000921	Trust: 1.0
vendor:	hp	model:	b5l05a	scope:	lt	version:	2308214_000902	Trust: 1.0
vendor:	hp	model:	e6b72a	scope:	lt	version:	2308214_000908	Trust: 1.0
vendor:	hp	model:	b5l24a	scope:	lt	version:	2308214_000907	Trust: 1.0
vendor:	hp	model:	cc523a	scope:	lt	version:	2308214_000932	Trust: 1.0
vendor:	hp	model:	a2w77a	scope:	lt	version:	2308214_000930	Trust: 1.0
vendor:	hp	model:	a2w78a	scope:	lt	version:	2308214_000930	Trust: 1.0
vendor:	hp	model:	j7x28a	scope:	lt	version:	_2308214_000912	Trust: 1.0
vendor:	hp	model:	ce991a	scope:	lt	version:	2308214_000926	Trust: 1.0
vendor:	hp	model:	2a70a	scope:	lt	version:	2308214_000911	Trust: 1.0
vendor:	hp	model:	ce504a	scope:	lt	version:	2308214_000904	Trust: 1.0
vendor:	hewlett packard	model:	2a68a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	a2w76a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	a2w77a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	b3g85a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	b5l04a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	b5l23a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	b5l24a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	b5l46a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	c2s11a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cc419a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	cc522a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cd644a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cd646a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	ce503a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	ce707a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	ce989a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	ce991a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	ce994a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cf066a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cf081a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cf116a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cf118a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cf235a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cf367a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cz244a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cz250a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	cz255a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	d3l08a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	e6b67a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	e6b69a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	e6b72a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	f2a76a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	g1w40a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	g1w46a	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	j7x28a	scope:	eq	version:	firmware	Trust: 0.8
vendor:	hewlett packard	model:	l2717a	scope:	-	version:	-	Trust: 0.8
vendor:	hp	model:	color laserjet cm4540 mfp cc419a 2308214 000901	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	color laserjet cm4540 mfp cc420a 2308214 000901	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	color laserjet cm4540 mfp cc421a 2308214 000901	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	color laserjet cp5525 ce707a <2308214 000900	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	color laserjet cp5525 ce708a <2308214 000900	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	color laserjet cp5525 ce709a <2308214 000900	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	laserjet enterprise m4555 mfp ce503a <2308214 000904	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	laserjet enterprise m4555 mfp ce504a <2308214 000904	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	laserjet enterprise m4555 mfp ce738a <2308214 000904	scope:	-	version:	-	Trust: 0.6
vendor:	hp	model:	scanjet enterprise document capture workstation l2717a	scope:	eq	version:	85000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf069a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf068a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf067a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf066a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m806 cz245a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m806 cz244a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m4555 mfp ce738a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m4555 mfp ce504a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m4555 mfp ce503a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise flow mfp m525c cf118a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise flow m830z mfp cf367a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m551 series cf083a	scope:	eq	version:	5000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m551 series cf082a	scope:	eq	version:	5000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m551 series cf081a	scope:	eq	version:	5000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 d7p71a	scope:	eq	version:	8000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 d7p70a	scope:	eq	version:	8000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 a2w76a	scope:	eq	version:	8000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 a2w75a	scope:	eq	version:	8000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m855 a2w79a	scope:	eq	version:	8000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m855 a2w78a	scope:	eq	version:	8000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m855 a2w77a	scope:	eq	version:	8000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m525f cf117a	scope:	eq	version:	5000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m525f cf116a	scope:	eq	version:	5000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m575dn cd645a	scope:	eq	version:	5000	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m575dn cd644a	scope:	eq	version:	5000	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m750 d3l10a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m750 d3l09a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m750 d3l08a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet cp5525 ce709a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet cp5525 ce708a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet cp5525 ce707a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet cm4540 mfp cc421a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet cm4540 mfp cc420a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	color laserjet cm4540 mfp cc419a	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	scanjet enterprise document capture workstation l2717a 2308214 000903	scope:	ne	version:	8500	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color l3u44a 2308214 000910	scope:	ne	version:	x556	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color g1w47v 2308214 000910	scope:	ne	version:	x556	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color g1w47a 2308214 000910	scope:	ne	version:	x556	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color g1w46v 2308214 000910	scope:	ne	version:	x556	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color g1w46a 2308214 000910	scope:	ne	version:	x556	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color mfp l3u43a 2308214 000923	scope:	ne	version:	x586	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color mfp l3u42a 2308214 000923	scope:	ne	version:	x586	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color mfp g1w41a 2308214 000923	scope:	ne	version:	x586	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color mfp g1w40a 2308214 000923	scope:	ne	version:	x586	Trust: 0.3
vendor:	hp	model:	pagewide enterprise color mfp g1w39a 2308214 000923	scope:	ne	version:	x586	Trust: 0.3
vendor:	hp	model:	officejet enterprise color c2s12a 2308214 000906	scope:	ne	version:	x555	Trust: 0.3
vendor:	hp	model:	officejet enterprise color c2s11a 2308214 000906	scope:	ne	version:	x555	Trust: 0.3
vendor:	hp	model:	officejet enterprise color mfp b5l07a 2308214 000902	scope:	ne	version:	x585	Trust: 0.3
vendor:	hp	model:	officejet enterprise color mfp b5l05a 2308214 000902	scope:	ne	version:	x585	Trust: 0.3
vendor:	hp	model:	officejet enterprise color mfp b5l04a 2308214 000902	scope:	ne	version:	x585	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf069a 2308214 000921	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf068a 2308214 000921	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf067a 2308214 000921	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m725 cf066a 2308214 000921	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m630 j7x28a 2308214 000912	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m806 cz245a 2308214 000920	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m806 cz244a 2308214 000920	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m605 e6b71a 2308214 000908	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m605 e6b70a 2308214 000908	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m605 e6b69a 2308214 000908	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m604 e6b68a 2308214 000908	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m604 e6b67a 2308214 000908	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m4555 mfp ce738a 2308214 000904	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m4555 mfp ce504a 2308214 000904	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m4555 mfp ce503a 2308214 000904	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise flow mfp m630z b3g85a 2308214 000912	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise flow mfp m525c cf118a 2308214 000913	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise flow m830z mfp cf367a 2308214 000916	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m551 series cf083a 2308214 000927	scope:	ne	version:	500	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m551 series cf082a 2308214 000927	scope:	ne	version:	500	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m551 series cf081a 2308214 000927	scope:	ne	version:	500	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 d7p71a 2308214 000928	scope:	ne	version:	800	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 d7p70a 2308214 000928	scope:	ne	version:	800	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 a2w76a 2308214 000928	scope:	ne	version:	800	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m880 a2w75a 2308214 000928	scope:	ne	version:	800	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m855 a2w79a 2308214 000930	scope:	ne	version:	800	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m855 a2w78a 2308214 000930	scope:	ne	version:	800	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color m855 a2w77a 2308214 000930	scope:	ne	version:	800	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m712xh cf238a 2308214 000922	scope:	ne	version:	700	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m712xh cf236a 2308214 000922	scope:	ne	version:	700	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m712xh cf235a 2308214 000922	scope:	ne	version:	700	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m775 series cc524a 2308214 000932	scope:	ne	version:	700	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m775 series cc523a 2308214 000932	scope:	ne	version:	700	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m775 series cc522a 2308214 000932	scope:	ne	version:	700	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m603xh ce996a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m603xh ce995a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m603xh ce994a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m602 ce993a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m602 ce992a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m602 ce991a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m601 ce990a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise m601 ce989a 2308214 000926	scope:	ne	version:	600	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m525f cf117a 2308214 000913	scope:	ne	version:	500	Trust: 0.3
vendor:	hp	model:	laserjet enterprise mfp m525f cf116a 2308214 000913	scope:	ne	version:	500	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m575dn cd645a 2308214 000925	scope:	ne	version:	500	Trust: 0.3
vendor:	hp	model:	laserjet enterprise color mfp m575dn cd644a 2308214 000925	scope:	ne	version:	500	Trust: 0.3
vendor:	hp	model:	color laserjet m680 cz251a 2308214 000915	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet m680 cz250a 2308214 000915	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise mfp m577 b5l48a 2308214 000909	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise mfp m577 b5l47a 2308214 000909	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise mfp m577 b5l46a 2308214 000909	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m750 d3l10a 2308214 000931	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m750 d3l09a 2308214 000931	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m750 d3l08a 2308214 000931	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m651 cz258a 2308214 000929	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m651 cz257a 2308214 000929	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m651 cz256a 2308214 000929	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m651 cz255a 2308214 000929	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m553 b5l26a 2308214 000907	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m553 b5l25a 2308214 000907	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m553 b5l24a 2308214 000907	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet enterprise m552 b5l23a 2308214 000907	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet cp5525 ce709a 2308214 000900	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet cp5525 ce708a 2308214 000900	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet cp5525 ce707a 2308214 000900	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet cm4540 mfp cc421a 2308214 000901	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet cm4540 mfp cc420a 2308214 000901	scope:	ne	version:	-	Trust: 0.3
vendor:	hp	model:	color laserjet cm4540 mfp cc419a 2308214 000901	scope:	ne	version:	-	Trust: 0.3

sources: CNVD: CNVD-2018-04189 // BID: 102836 // JVNDB: JVNDB-2017-012252 // NVD: CVE-2017-2743

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-2743
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2017-2743
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2018-04189
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201801-877
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2017-2743
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-2743
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
CNVD:	CNVD-2018-04189
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2017-2743
baseSeverity:	MEDIUM
baseScore:	6.1
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	2.7
version:	3.0
Trust: 1.8

sources: CNVD: CNVD-2018-04189 // VULMON: CVE-2017-2743 // JVNDB: JVNDB-2017-012252 // CNNVD: CNNVD-201801-877 // NVD: CVE-2017-2743

PROBLEMTYPE DATA

problemtype:

CWE-79

Trust: 1.8

sources: JVNDB: JVNDB-2017-012252 // NVD: CVE-2017-2743

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201801-877

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-201801-877

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-012252

PATCH

title:	HPSBPI03559	url:	https://support.hp.com/us-en/document/c05541569	Trust: 0.8
title:	Patches for multiple HP product cross-site scripting vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/120055	Trust: 0.6
title:	Multiple HP Fixes for product cross-site scripting vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=78029	Trust: 0.6
title:	HP: HPSBPI03559 rev 1 - HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS, Cross Site Scripting (XSS)	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=HPSBPI03559	Trust: 0.1
title:	HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03559 rev 1 - HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS, Cross Site Scripting (XSS)	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=bc05e8047932237aeb8d9f20414e0894	Trust: 0.1
title:	HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03559 rev 1 - HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS, Cross Site Scripting (XSS)	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=d7d48b64d963669169ce4692038bfbdd	Trust: 0.1

sources: CNVD: CNVD-2018-04189 // VULMON: CVE-2017-2743 // JVNDB: JVNDB-2017-012252 // CNNVD: CNNVD-201801-877

EXTERNAL IDS

db:	NVD	id:	CVE-2017-2743	Trust: 3.4
db:	JVNDB	id:	JVNDB-2017-012252	Trust: 0.8
db:	CNVD	id:	CNVD-2018-04189	Trust: 0.6
db:	CNNVD	id:	CNNVD-201801-877	Trust: 0.6
db:	BID	id:	102836	Trust: 0.4
db:	VULMON	id:	CVE-2017-2743	Trust: 0.1

sources: CNVD: CNVD-2018-04189 // VULMON: CVE-2017-2743 // BID: 102836 // JVNDB: JVNDB-2017-012252 // CNNVD: CNNVD-201801-877 // NVD: CVE-2017-2743

REFERENCES

url:	https://support.hp.com/us-en/document/c05541569	Trust: 2.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-2743	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-2743	Trust: 0.8
url:	http://www.hp.com/	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/79.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.securityfocus.com/bid/102836	Trust: 0.1

sources: CNVD: CNVD-2018-04189 // VULMON: CVE-2017-2743 // BID: 102836 // JVNDB: JVNDB-2017-012252 // CNNVD: CNNVD-201801-877 // NVD: CVE-2017-2743

CREDITS

Jerry Decime

Trust: 0.3

sources: BID: 102836

SOURCES

db:	CNVD	id:	CNVD-2018-04189
db:	VULMON	id:	CVE-2017-2743
db:	BID	id:	102836
db:	JVNDB	id:	JVNDB-2017-012252
db:	CNNVD	id:	CNNVD-201801-877
db:	NVD	id:	CVE-2017-2743

LAST UPDATE DATE

2024-11-23T22:07:01.545000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2018-04189	date:	2018-03-02T00:00:00
db:	VULMON	id:	CVE-2017-2743	date:	2018-02-13T00:00:00
db:	BID	id:	102836	date:	2017-06-15T00:00:00
db:	JVNDB	id:	JVNDB-2017-012252	date:	2018-03-01T00:00:00
db:	CNNVD	id:	CNNVD-201801-877	date:	2018-01-24T00:00:00
db:	NVD	id:	CVE-2017-2743	date:	2024-11-21T03:24:05.877

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2018-04189	date:	2018-03-02T00:00:00
db:	VULMON	id:	CVE-2017-2743	date:	2018-01-23T00:00:00
db:	BID	id:	102836	date:	2017-06-15T00:00:00
db:	JVNDB	id:	JVNDB-2017-012252	date:	2018-03-01T00:00:00
db:	CNNVD	id:	CNNVD-201801-877	date:	2018-01-24T00:00:00
db:	NVD	id:	CVE-2017-2743	date:	2018-01-23T16:29:01.087