CVE-2017-2741
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet...
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
- Record
CVE-2017-2741- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
- Record
CVE-2017-2741- Updated
- 2026-11-02
EUVDEUVD-2017-11884 No score
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
- Record
EUVD-2017-11884- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwmw-cg25-484w
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet...
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
- Record
GHSA-fwmw-cg25-484w- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- hp d3q15a firmware
- hp d3q15b firmware
- hp d3q15d firmware
- hp d3q16a firmware
- hp d3q16b firmware
- hp d3q16c firmware
- hp d3q16d firmware
- hp d3q17a firmware
- hp d3q17c firmware
- hp d3q17d firmware
- hp d3q19a firmware
- hp d3q19d firmware
Show 27 moreShow less
- hp d3q20a firmware
- hp d3q20b firmware
- hp d3q20c firmware
- hp d3q20d firmware
- hp d3q21a firmware
- hp d3q21c firmware
- hp d3q21d firmware
- hp d9l20a firmware
- hp d9l21a firmware
- hp d9l63a firmware
- hp d9l64a firmware
- hp j3p68a firmware
- hp j6u55a firmware
- hp j6u55b firmware
- hp j6u55c firmware
- hp j6u55d firmware
- hp j6u57b firmware
- hp j9v80a firmware
- hp j9v80b firmware
- hp j9v82a firmware
- hp j9v82b firmware
- hp j9v82c firmware
- hp j9v82d firmware
- hp k9z76a firmware
- hp k9z76d firmware
- hp t0g70a firmware
- hp inc. pagewide printers; hp officejet pro printers
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution | 2017-06-14 |
| Exploit-DB | HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit) | 2018-08-27 |
| Metasploit | HP Jetdirect Path Traversal Arbitrary Code Execution | 2017-04-05 |
| PoC in GitHub | dopheide-esnet/zeek-jetdirect | 2021-08-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-2741 is a critical vulnerability (CVSS 9.8) in Hp D3q15a Firmware, published January 23, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 82.3%, the 99th percentile. No source names a fixed version.