Read the docs
TI-2017-01983 Aliases CVE-2017-2741GHSA-fwmw-cg25-484w

A potential security vulnerability has been identified with HP PageWide Printers, HP…

Priority HIGH 83Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.

Why it matters now

EPSS 0.82327 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA
Fix Fixed HP PageWide Printers; HP OfficeJet Pro Printers (HP Inc.): 1708D

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard EnterpriseHP PageWide Printers; HP OfficeJet Pro Printersbefore 1708D1708DPatch availableCNA
  • HP PageWide Printers; HP OfficeJet Pro Printers VendorHewlett Packard Enterprise Affected before 1708D Fixed in 1708D Patch available CNA

CPE configurations NVD · 76

CPEVersionsRoleVendor
cpe:2.3:o:hp:j9v82a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v82a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v82b_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v82b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v82c_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v82c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v82d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v82d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u55a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u55a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 66 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:j6u55b_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u55b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u55c_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u55c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u55d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u55d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k9z76a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k9z76a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k9z76d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k9z76d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q17a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q17a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q17c_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q17c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q17d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q17d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q21a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q21a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q21c_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q21c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q21d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q21d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20b_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20c_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q16a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q16a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q16b_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q16b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q16c_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q16c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q16d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q16d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q19a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q19a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q19d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q19d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q15a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q15a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q15b_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q15b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q15d_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q15d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v80a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v80a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v80b_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v80b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u57b_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u57b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l20a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l20a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l21a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l21a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l63a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l64a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g70a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*before 1708dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j3p68a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

  • Fix · CNA HP PageWide Printers; HP OfficeJet Pro Printers (HP Inc.) Fixed in 1708D

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2741
  2. 2026-10-03 Alias added: GHSA-fwmw-cg25-484w

References

Exploit 2

Advisory 1

  • TI-2018-04318 Out-of-bounds write in Hewlett Packard Enterprise HP inkjet printers CVSS 3.0CRITICAL 9.8
  • TI-2022-11362 Certain HP Print Products are potentially vulnerable to Remote Code Execution. CVSS 3.1CRITICAL 9.8
  • TI-2018-04319 Memory corruption in Hewlett Packard Enterprise HP inkjet printers CVSS 3.0HIGH 7.8
  • TI-2022-11363 Certain HP Print Products are potentially vulnerable to Buffer Overflow. CVSS 3.1CRITICAL 9.8
  • TI-2019-07924 Memory corruption in Qualcomm PostScript and PDF printers that use IPS versions prior to… CVSS 3.1CRITICAL 9.8
  • TI-2019-04502 For the printers listed a maliciously crafted print file might cause certain HP Inkjet… CVSS 3.1MEDIUM 5.2

Sources