CVE-2017-2743
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and...
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
- Record
CVE-2017-2743- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
- Record
CVE-2017-2743- Updated
- 2026-11-02
EUVDEUVD-2017-11886 No score
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
- Record
EUVD-2017-11886- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hcg4-cm8x-9w3v
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and...
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
- Record
GHSA-hcg4-cm8x-9w3v- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
- hp 2a68a firmware
- hp 2a69a firmware
- hp 2a70a firmware
- hp 2a71a firmware
- hp a2w75a firmware
- hp a2w76a firmware
- hp a2w77a firmware
- hp a2w78a firmware
- hp a2w79a firmware
- hp b3g85a firmware
- hp b5l04a firmware
- hp b5l05a firmware
Show 77 moreShow less
- hp b5l07a firmware
- hp b5l23a firmware
- hp b5l24a firmware
- hp b5l25a firmware
- hp b5l26a firmware
- hp b5l46a firmware
- hp b5l47a firmware
- hp b5l48a firmware
- hp c2s11a firmware
- hp c2s12a firmware
- hp cc419a firmware
- hp cc420a firmware
- hp cc421a firmware
- hp cc522a firmware
- hp cc523a firmware
- hp cc524a firmware
- hp cd644a firmware
- hp cd645a firmware
- hp cd646a firmware
- hp ce503a firmware
- hp ce504a firmware
- hp ce707a firmware
- hp ce708a firmware
- hp ce709a firmware
- hp ce738a firmware
- hp ce989a firmware
- hp ce990a firmware
- hp ce991a firmware
- hp ce992a firmware
- hp ce993a firmware
- hp ce994a firmware
- hp ce995a firmware
- hp ce996a firmware
- hp cf066a firmware
- hp cf067a firmware
- hp cf068a firmware
- hp cf069a firmware
- hp cf081a firmware
- hp cf082a firmware
- hp cf083a firmware
- hp cf116a firmware
- hp cf117a firmware
- hp cf118a firmware
- hp cf235a firmware
- hp cf236a firmware
- hp cf238a firmware
- hp cf367a firmware
- hp cz244a firmware
- hp cz245a firmware
- hp d3l08a firmware
- hp d3l09a firmware
- hp d3l10a firmware
- hp d7p70a firmware
- hp d7p71a firmware
- hp e6b67a firmware
- hp e6b68a firmware
- hp e6b69a firmware
- hp e6b70a firmware
- hp e6b71a firmware
- hp e6b72a firmware
- hp e6b73a firmware
- hp f2a76a firmware
- hp f2a77a firmware
- hp f2a81a firmware
- hp g1w39a firmware
- hp g1w40a firmware
- hp g1w41a firmware
- hp g1w46a firmware
- hp g1w46v firmware
- hp g1w47a firmware
- hp g1w47v firmware
- hp j7x28a firmware
- hp l2717a firmware
- hp l3u42a firmware
- hp l3u43a firmware
- hp l3u44a firmware
- hp inc. enterprise laserjet printers and mfps; hp officejet enterprise color printers and mfp; hp pagewide color printers and mps
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-2743 is a medium vulnerability (CVSS 6.1) in Hp 2a68a Firmware, published January 23, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.24%, the 69th percentile. No source names a fixed version.