Multiple HP Printers CVE-2017-2743 Unspecified Cross Site Scripting Vulnerability
BID:102836
Info
Multiple HP Printers CVE-2017-2743 Unspecified Cross Site Scripting Vulnerability
| Bugtraq ID: | 102836 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-2743 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 15 2017 12:00AM |
| Updated: | Jun 15 2017 12:00AM |
| Credit: | Jerry Decime |
| Vulnerable: |
HP Scanjet Enterprise 8500 Document Capture Workstation L2717A 0 HP LaserJet Enterprise MFP M725 CF069A 0 HP LaserJet Enterprise MFP M725 CF068A 0 HP LaserJet Enterprise MFP M725 CF067A 0 HP LaserJet Enterprise MFP M725 CF066A 0 HP LaserJet Enterprise M806 CZ245A 0 HP LaserJet Enterprise M806 CZ244A 0 HP LaserJet Enterprise M4555 MFP CE738A 0 HP LaserJet Enterprise M4555 MFP CE504A 0 HP LaserJet Enterprise M4555 MFP CE503A 0 HP LaserJet Enterprise flow MFP M525c CF118A 0 HP LaserJet Enterprise flow M830z MFP CF367A 0 HP LaserJet Enterprise Color 500 M551 Series CF083A 0 HP LaserJet Enterprise Color 500 M551 Series CF082A 0 HP LaserJet Enterprise Color 500 M551 Series CF081A 0 HP LaserJet Enterprise 800 color MFP M880 D7P71A 0 HP LaserJet Enterprise 800 color MFP M880 D7P70A 0 HP LaserJet Enterprise 800 color MFP M880 A2W76A 0 HP LaserJet Enterprise 800 color MFP M880 A2W75A 0 HP LaserJet Enterprise 800 color M855 A2W79A 0 HP LaserJet Enterprise 800 color M855 A2W78A 0 HP LaserJet Enterprise 800 color M855 A2W77A 0 HP LaserJet Enterprise 500 MFP M525f CF117A 0 HP LaserJet Enterprise 500 MFP M525f CF116A 0 HP LaserJet Enterprise 500 color MFP M575dn CD645A 0 HP LaserJet Enterprise 500 color MFP M575dn CD644A 0 HP Color LaserJet Enterprise M750 D3L10A 0 HP Color LaserJet Enterprise M750 D3L09A 0 HP Color LaserJet Enterprise M750 D3L08A 0 HP Color LaserJet CP5525 CE709A 0 HP Color LaserJet CP5525 CE708A 0 HP Color LaserJet CP5525 CE707A 0 HP Color LaserJet CM4540 MFP CC421A 0 HP Color LaserJet CM4540 MFP CC420A 0 HP Color LaserJet CM4540 MFP CC419A 0 |
| Not Vulnerable: |
HP Scanjet Enterprise 8500 Document Capture Workstation L2717A 2308214_000903 HP PageWide Enterprise Color X556 L3U44A 2308214_000910 HP PageWide Enterprise Color X556 G1W47V 2308214_000910 HP PageWide Enterprise Color X556 G1W47A 2308214_000910 HP PageWide Enterprise Color X556 G1W46V 2308214_000910 HP PageWide Enterprise Color X556 G1W46A 2308214_000910 HP PageWide Enterprise Color MFP X586 L3U43A 2308214_000923 HP PageWide Enterprise Color MFP X586 L3U42A 2308214_000923 HP PageWide Enterprise Color MFP X586 G1W41A 2308214_000923 HP PageWide Enterprise Color MFP X586 G1W40A 2308214_000923 HP PageWide Enterprise Color MFP X586 G1W39A 2308214_000923 HP OfficeJet Enterprise Color X555 C2S12A 2308214_000906 HP OfficeJet Enterprise Color X555 C2S11A 2308214_000906 HP OfficeJet Enterprise Color MFP X585 B5L07A 2308214_000902 HP OfficeJet Enterprise Color MFP X585 B5L05A 2308214_000902 HP OfficeJet Enterprise Color MFP X585 B5L04A 2308214_000902 HP LaserJet Enterprise MFP M725 CF069A 2308214_000921 HP LaserJet Enterprise MFP M725 CF068A 2308214_000921 HP LaserJet Enterprise MFP M725 CF067A 2308214_000921 HP LaserJet Enterprise MFP M725 CF066A 2308214_000921 HP LaserJet Enterprise MFP M630 J7X28A 2308214_000912 HP LaserJet Enterprise M806 CZ245A 2308214_000920 HP LaserJet Enterprise M806 CZ244A 2308214_000920 HP LaserJet Enterprise M605 E6B71A 2308214_000908 HP LaserJet Enterprise M605 E6B70A 2308214_000908 HP LaserJet Enterprise M605 E6B69A 2308214_000908 HP LaserJet Enterprise M604 E6B68A 2308214_000908 HP LaserJet Enterprise M604 E6B67A 2308214_000908 HP LaserJet Enterprise M4555 MFP CE738A 2308214_000904 HP LaserJet Enterprise M4555 MFP CE504A 2308214_000904 HP LaserJet Enterprise M4555 MFP CE503A 2308214_000904 HP LaserJet Enterprise Flow MFP M630z B3G85A 2308214_000912 HP LaserJet Enterprise flow MFP M525c CF118A 2308214_000913 HP LaserJet Enterprise flow M830z MFP CF367A 2308214_000916 HP LaserJet Enterprise Color 500 M551 Series CF083A 2308214_000927 HP LaserJet Enterprise Color 500 M551 Series CF082A 2308214_000927 HP LaserJet Enterprise Color 500 M551 Series CF081A 2308214_000927 HP LaserJet Enterprise 800 color MFP M880 D7P71A 2308214_000928 HP LaserJet Enterprise 800 color MFP M880 D7P70A 2308214_000928 HP LaserJet Enterprise 800 color MFP M880 A2W76A 2308214_000928 HP LaserJet Enterprise 800 color MFP M880 A2W75A 2308214_000928 HP LaserJet Enterprise 800 color M855 A2W79A 2308214_000930 HP LaserJet Enterprise 800 color M855 A2W78A 2308214_000930 HP LaserJet Enterprise 800 color M855 A2W77A 2308214_000930 HP LaserJet Enterprise 700 M712xh CF238A 2308214_000922 HP LaserJet Enterprise 700 M712xh CF236A 2308214_000922 HP LaserJet Enterprise 700 M712xh CF235A 2308214_000922 HP LaserJet Enterprise 700 color MFP M775 series CC524A 2308214_000932 HP LaserJet Enterprise 700 color MFP M775 series CC523A 2308214_000932 HP LaserJet Enterprise 700 color MFP M775 series CC522A 2308214_000932 HP LaserJet Enterprise 600 M603xh CE996A 2308214_000926 HP LaserJet Enterprise 600 M603xh CE995A 2308214_000926 HP LaserJet Enterprise 600 M603xh CE994A 2308214_000926 HP LaserJet Enterprise 600 M602 CE993A 2308214_000926 HP LaserJet Enterprise 600 M602 CE992A 2308214_000926 HP LaserJet Enterprise 600 M602 CE991A 2308214_000926 HP LaserJet Enterprise 600 M601 CE990A 2308214_000926 HP LaserJet Enterprise 600 M601 CE989A 2308214_000926 HP LaserJet Enterprise 500 MFP M525f CF117A 2308214_000913 HP LaserJet Enterprise 500 MFP M525f CF116A 2308214_000913 HP LaserJet Enterprise 500 color MFP M575dn CD645A 2308214_000925 HP LaserJet Enterprise 500 color MFP M575dn CD644A 2308214_000925 HP Color LaserJet M680 CZ251A 2308214_000915 HP Color LaserJet M680 CZ250A 2308214_000915 HP Color LaserJet Enterprise MFP M577 B5L48A 2308214_000909 HP Color LaserJet Enterprise MFP M577 B5L47A 2308214_000909 HP Color LaserJet Enterprise MFP M577 B5L46A 2308214_000909 HP Color LaserJet Enterprise M750 D3L10A 2308214_000931 HP Color LaserJet Enterprise M750 D3L09A 2308214_000931 HP Color LaserJet Enterprise M750 D3L08A 2308214_000931 HP Color LaserJet Enterprise M651 CZ258A 2308214_000929 HP Color LaserJet Enterprise M651 CZ257A 2308214_000929 HP Color LaserJet Enterprise M651 CZ256A 2308214_000929 HP Color LaserJet Enterprise M651 CZ255A 2308214_000929 HP Color LaserJet Enterprise M553 B5L26A 2308214_000907 HP Color LaserJet Enterprise M553 B5L25A 2308214_000907 HP Color LaserJet Enterprise M553 B5L24A 2308214_000907 HP Color LaserJet Enterprise M552 B5L23A 2308214_000907 HP Color LaserJet CP5525 CE709A 2308214_000900 HP Color LaserJet CP5525 CE708A 2308214_000900 HP Color LaserJet CP5525 CE707A 2308214_000900 HP Color LaserJet CM4540 MFP CC421A 2308214_000901 HP Color LaserJet CM4540 MFP CC420A 2308214_000901 HP Color LaserJet CM4540 MFP CC419A 2308214_000901 |
Discussion
Multiple HP Printers CVE-2017-2743 Unspecified Cross Site Scripting Vulnerability
Multiple HP printers are prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
Remote attackers can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Multiple HP printers are prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
Remote attackers can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
Multiple HP Printers CVE-2017-2743 Unspecified Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Solution / Fix
Multiple HP Printers CVE-2017-2743 Unspecified Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple HP Printers CVE-2017-2743 Unspecified Cross Site Scripting Vulnerability
References:
References: