CVE & CISA-KEV Catalog

CVE-2017-2743

MEDIUM
6.1
CVSS v3
NVD

Description

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.

CWE-79Cross-Site Scripting (XSS)

How to fix

Remediation Available
2a68a firmwareNVD
Affected:< 2308214_000911Fixed in:2308214_000911CVE-2017-2743derived from NVD
2a69a firmwareNVD
Affected:< 2308214_000911Fixed in:2308214_000911CVE-2017-2743derived from NVD
2a70a firmwareNVD
Affected:< 2308214_000911Fixed in:2308214_000911CVE-2017-2743derived from NVD
2a71a firmwareNVD
Affected:< 2308214_000911Fixed in:2308214_000911CVE-2017-2743derived from NVD
a2w75a firmwareNVD
Affected:< 2308214_000928Fixed in:2308214_000928CVE-2017-2743derived from NVD
a2w76a firmwareNVD
Affected:< 2308214_000928Fixed in:2308214_000928CVE-2017-2743derived from NVD
a2w77a firmwareNVD
Affected:< 2308214_000930Fixed in:2308214_000930CVE-2017-2743derived from NVD
a2w78a firmwareNVD
Affected:< 2308214_000930Fixed in:2308214_000930CVE-2017-2743derived from NVD
a2w79a firmwareNVD
Affected:< 2308214_000930Fixed in:2308214_000930CVE-2017-2743derived from NVD
b3g85a firmwareNVD
Affected:< 2308214_000912Fixed in:2308214_000912CVE-2017-2743derived from NVD
b5l04a firmwareNVD
Affected:< 2308214_000902Fixed in:2308214_000902CVE-2017-2743derived from NVD
b5l05a firmwareNVD
Affected:< 2308214_000902Fixed in:2308214_000902CVE-2017-2743derived from NVD
b5l07a firmwareNVD
Affected:< 2308214_000902Fixed in:2308214_000902CVE-2017-2743derived from NVD
b5l23a firmwareNVD
Affected:< 2308214_000907Fixed in:2308214_000907CVE-2017-2743derived from NVD
b5l24a firmwareNVD
Affected:< 2308214_000907Fixed in:2308214_000907CVE-2017-2743derived from NVD
b5l25a firmwareNVD
Affected:< 2308214_000907Fixed in:2308214_000907CVE-2017-2743derived from NVD
b5l26a firmwareNVD
Affected:< 2308214_000907Fixed in:2308214_000907CVE-2017-2743derived from NVD
b5l46a firmwareNVD
Affected:< 2308214_000909Fixed in:2308214_000909CVE-2017-2743derived from NVD
b5l47a firmwareNVD
Affected:< 2308214_000909Fixed in:2308214_000909CVE-2017-2743derived from NVD
b5l48a firmwareNVD
Affected:< 2308214_000909Fixed in:2308214_000909CVE-2017-2743derived from NVD
c2s11a firmwareNVD
Affected:< 2308214_000906Fixed in:2308214_000906CVE-2017-2743derived from NVD
c2s12a firmwareNVD
Affected:< 2308214_000906Fixed in:2308214_000906CVE-2017-2743derived from NVD
cc419a firmwareNVD
Affected:< 2308214_000901Fixed in:2308214_000901CVE-2017-2743derived from NVD
cc420a firmwareNVD
Affected:< 2308214_000901Fixed in:2308214_000901CVE-2017-2743derived from NVD
cc421a firmwareNVD
Affected:< 2308214_000901Fixed in:2308214_000901CVE-2017-2743derived from NVD
cc522a firmwareNVD
Affected:< 2308214_000932Fixed in:2308214_000932CVE-2017-2743derived from NVD
cc523a firmwareNVD
Affected:< 2308214_000932Fixed in:2308214_000932CVE-2017-2743derived from NVD
cc524a firmwareNVD
Affected:< 2308214_000932Fixed in:2308214_000932CVE-2017-2743derived from NVD
cd644a firmwareNVD
Affected:< 2308214_000925Fixed in:2308214_000925CVE-2017-2743derived from NVD
cd645a firmwareNVD
Affected:< 2308214_000925Fixed in:2308214_000925CVE-2017-2743derived from NVD
cd646a firmwareNVD
Affected:< 2308214_000925Fixed in:2308214_000925CVE-2017-2743derived from NVD
ce503a firmwareNVD
Affected:< 2308214_000904Fixed in:2308214_000904CVE-2017-2743derived from NVD
ce504a firmwareNVD
Affected:< 2308214_000904Fixed in:2308214_000904CVE-2017-2743derived from NVD
ce707a firmwareNVD
Affected:< 2308214_000900Fixed in:2308214_000900CVE-2017-2743derived from NVD
ce708a firmwareNVD
Affected:< 2308214_000900Fixed in:2308214_000900CVE-2017-2743derived from NVD
ce709a firmwareNVD
Affected:< 2308214_000900Fixed in:2308214_000900CVE-2017-2743derived from NVD
ce738a firmwareNVD
Affected:< 2308214_000904Fixed in:2308214_000904CVE-2017-2743derived from NVD
ce989a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
ce990a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
ce991a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
ce992a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
ce993a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
ce994a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
ce995a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
ce996a firmwareNVD
Affected:< 2308214_000926Fixed in:2308214_000926CVE-2017-2743derived from NVD
cf066a firmwareNVD
Affected:< 2308214_000921Fixed in:2308214_000921CVE-2017-2743derived from NVD
cf067a firmwareNVD
Affected:< 2308214_000921Fixed in:2308214_000921CVE-2017-2743derived from NVD
cf068a firmwareNVD
Affected:< 2308214_000921Fixed in:2308214_000921CVE-2017-2743derived from NVD
cf069a firmwareNVD
Affected:< 2308214_000921Fixed in:2308214_000921CVE-2017-2743derived from NVD
cf081a firmwareNVD
Affected:< 2308214_000927Fixed in:2308214_000927CVE-2017-2743derived from NVD
cf082a firmwareNVD
Affected:< 2308214_000927Fixed in:2308214_000927CVE-2017-2743derived from NVD
cf083a firmwareNVD
Affected:< 2308214_000927Fixed in:2308214_000927CVE-2017-2743derived from NVD
cf116a firmwareNVD
Affected:< 2308214_000913Fixed in:2308214_000913CVE-2017-2743derived from NVD
cf117a firmwareNVD
Affected:< 2308214_000913Fixed in:2308214_000913CVE-2017-2743derived from NVD
cf118a firmwareNVD
Affected:< 2308214_000913Fixed in:2308214_000913CVE-2017-2743derived from NVD
cf235a firmwareNVD
Affected:< 2308214_000922Fixed in:2308214_000922CVE-2017-2743derived from NVD
cf236a firmwareNVD
Affected:< 2308214_000922Fixed in:2308214_000922CVE-2017-2743derived from NVD
cf238a firmwareNVD
Affected:< 2308214_000922Fixed in:2308214_000922CVE-2017-2743derived from NVD
cf367a firmwareNVD
Affected:< 2308214_000916Fixed in:2308214_000916CVE-2017-2743derived from NVD
cz244a firmwareNVD
Affected:< 2308214_000920Fixed in:2308214_000920CVE-2017-2743derived from NVD
cz245a firmwareNVD
Affected:< 2308214_000920Fixed in:2308214_000920CVE-2017-2743derived from NVD
d3l08a firmwareNVD
Affected:< 2308214_000931Fixed in:2308214_000931CVE-2017-2743derived from NVD
d3l09a firmwareNVD
Affected:< 2308214_000931Fixed in:2308214_000931CVE-2017-2743derived from NVD
d3l10a firmwareNVD
Affected:< 2308214_000931Fixed in:2308214_000931CVE-2017-2743derived from NVD
d7p70a firmwareNVD
Affected:< 2308214_000928Fixed in:2308214_000928CVE-2017-2743derived from NVD
d7p71a firmwareNVD
Affected:< 2308214_000928Fixed in:2308214_000928CVE-2017-2743derived from NVD
e6b67a firmwareNVD
Affected:< 2308214_000908Fixed in:2308214_000908CVE-2017-2743derived from NVD
e6b68a firmwareNVD
Affected:< 2308214_000908Fixed in:2308214_000908CVE-2017-2743derived from NVD
e6b69a firmwareNVD
Affected:< 2308214_000908Fixed in:2308214_000908CVE-2017-2743derived from NVD
e6b70a firmwareNVD
Affected:< 2308214_000908Fixed in:2308214_000908CVE-2017-2743derived from NVD
e6b71a firmwareNVD
Affected:< _2308214_000908Fixed in:_2308214_000908CVE-2017-2743derived from NVD
e6b72a firmwareNVD
Affected:< 2308214_000908Fixed in:2308214_000908CVE-2017-2743derived from NVD
e6b73a firmwareNVD
Affected:< 2308214_000908Fixed in:2308214_000908CVE-2017-2743derived from NVD
f2a76a firmwareNVD
Affected:< 2308214_000905Fixed in:2308214_000905CVE-2017-2743derived from NVD
f2a77a firmwareNVD
Affected:< 2308214_000905Fixed in:2308214_000905CVE-2017-2743derived from NVD
f2a81a firmwareNVD
Affected:< 2308214_000905Fixed in:2308214_000905CVE-2017-2743derived from NVD
g1w39a firmwareNVD
Affected:< 2308214_000923Fixed in:2308214_000923CVE-2017-2743derived from NVD
g1w40a firmwareNVD
Affected:< 2308214_000923Fixed in:2308214_000923CVE-2017-2743derived from NVD
g1w41a firmwareNVD
Affected:< 2308214_000923Fixed in:2308214_000923CVE-2017-2743derived from NVD
g1w46a firmwareNVD
Affected:< 2308214_000910Fixed in:2308214_000910CVE-2017-2743derived from NVD
g1w46v firmwareNVD
Affected:< 2308214_000910Fixed in:2308214_000910CVE-2017-2743derived from NVD
g1w47a firmwareNVD
Affected:< 2308214_000910Fixed in:2308214_000910CVE-2017-2743derived from NVD
g1w47v firmwareNVD
Affected:< 2308214_000910Fixed in:2308214_000910CVE-2017-2743derived from NVD
j7x28a firmwareNVD
Affected:< _2308214_000912Fixed in:_2308214_000912CVE-2017-2743derived from NVD
l2717a firmwareNVD
Affected:< 2308214_000903Fixed in:2308214_000903CVE-2017-2743derived from NVD
l3u42a firmwareNVD
Affected:< 2308214_000923Fixed in:2308214_000923CVE-2017-2743derived from NVD
l3u43a firmwareNVD
Affected:< 2308214_000923Fixed in:2308214_000923CVE-2017-2743derived from NVD
l3u44a firmwareNVD
Affected:< 2308214_000910Fixed in:2308214_000910CVE-2017-2743derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeChanged

Impact

ConfidentialityLow
IntegrityLow
AvailabilityNone

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploit Intelligence

1.24%probability of exploitation in 30 days
66thpercentile

Moderate risk: more likely to be exploited than 66% of all known CVEs.

References

Vendor Advisory1

Related Vulnerabilities

Other CWE-79 (Cross-Site Scripting (XSS)) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2020-11022Medium6.999%-Fix
CVE-2019-3929Critical9.899%KEVFix
CVE-2020-9496Medium6.199%--
CVE-2023-28341Medium6.199%-Fix
CVE-2018-12998Medium6.198%--
CVE-2025-4123High7.698%-Fix
Embed a live status badge for CVE-2017-2743
CVE-2017-2743 severity badge

Markdown

[![CVE-2017-2743](https://tridentstack.com/cve/badge/CVE-2017-2743.svg)](https://tridentstack.com/cve/CVE-2017-2743)

HTML

<a href="https://tridentstack.com/cve/CVE-2017-2743"><img src="https://tridentstack.com/cve/badge/CVE-2017-2743.svg" alt="CVE-2017-2743"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.