PT-2018-7182 · Hewlett Packard · Latex 560+21

Publicado

2018-01-23

·

Atualizado

2019-10-03

·

CVE-2017-2747

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: DesignJet T790, T795, T1300, T2300 versions before IG 11 00 00.10 DesignJet T920, T930, T1500, T1530, T2500, T2530 versions before MRY 04 05 00.5 DesignJet T3500 version before AENEAS 03 04 00.9 Latex 310, 330, 360, 370 versions before NEXUS 01 12 00.11 Latex 315, 335, 365, 375 versions before NEXUS 03 12 00.15 Latex 560, 570 version before STORM 00 05 01.6 Latex 110 version before STORM 00 05 01.6
Description: A potential security issue may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.
Recommendations: For DesignJet T790, T795, T1300, T2300 versions before IG 11 00 00.10, update to a version after IG 11 00 00.10. For DesignJet T920, T930, T1500, T1530, T2500, T2530 versions before MRY 04 05 00.5, update to a version after MRY 04 05 00.5. For DesignJet T3500 version before AENEAS 03 04 00.9, update to a version after AENEAS 03 04 00.9. For Latex 310, 330, 360, 370 versions before NEXUS 01 12 00.11, update to a version after NEXUS 01 12 00.11. For Latex 315, 335, 365, 375 versions before NEXUS 03 12 00.15, update to a version after NEXUS 03 12 00.15. For Latex 560, 570 version before STORM 00 05 01.6, update to a version after STORM 00 05 01.6. For Latex 110 version before STORM 00 05 01.6, update to a version after STORM 00 05 01.6.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2017-2747

Produtos afetados

Designjet T1300
Designjet T1500
Designjet T1530
Designjet T2300
Designjet T2500
Designjet T2530
Designjet T3500
Designjet T790
Designjet T795
Designjet T920
Designjet T930
Latex 110
Latex 310
Latex 315
Latex 330
Latex 335
Latex 360
Latex 365
Latex 370
Latex 375
Latex 560
Latex 570