PT-2018-7183 · Hewlett Packard · Hp Laserjet Enterprise+3

Publicado 2018-01-23 · Atualizado 2018-02-21 · CVE-2017-2750

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HP LaserJet Enterprise printers versions prior to 2308937 578479 HP PageWide Enterprise printers versions prior to 2308937 578479 HP LaserJet Managed printers versions prior to 2308937 578479 HP OfficeJet Enterprise printers versions prior to 2308937 578479

Description: The issue is related to insufficient validation of DLL signatures, which could allow the execution of arbitrary code.

Recommendations: For HP LaserJet Enterprise printers versions prior to 2308937 578479, update the firmware to version 2308937 578479 or later. For HP PageWide Enterprise printers versions prior to 2308937 578479, update the firmware to version 2308937 578479 or later. For HP LaserJet Managed printers versions prior to 2308937 578479, update the firmware to version 2308937 578479 or later. For HP OfficeJet Enterprise printers versions prior to 2308937 578479, update the firmware to version 2308937 578479 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-2750

Produtos afetados

Hp Laserjet Enterprise

Hp Laserjet Managed

Officejet Enterprise

Hp Pagewide Enterprise

Referências · 4

• https://support.hp.com/us-en/document/c05839270 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2750 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-2750 · Aviso do Fabricante
• http://securityfocus.com/bid/101965 · Nota