Skip to content
Fencer Vulns
critical 9.8

CVE-2017-2750 json

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide…

published 2018-01-23 8 y ago modified 2026-06-17 4 mo ago also EUVD-2017-11893

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
9.9%
EPSS 9.9% chance of exploitation in 30 days, percentile 95%
public exploits
0
none known

Summary

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions.

Patch / fix

  • hp l2683a_firmware 2405087_018552
  • hp l2717a_firmware 2308937_578486
  • hp l2762a_firmware 2308937_578483, 2405087_018553
  • hp j7z13a_firmware 2405087_018548
  • hp z5g79a_firmware 2405087_018548
  • hp l3u42a_firmware 2308937_578492, 2405129_000066
  • hp j7z08a_firmware 2405087_018548
  • hp j7z14a_firmware 2405087_018548
  • hp z5g77a_firmware 2405087_018548
  • hp j7z03a_firmware 2405087_018548
  • hp j7z07a_firmware 2405087_018548
  • hp j7z05a_firmware 2405087_018548
  • hp l3u43a_firmware 2308937_578492, 2405129_000066
  • hp g1w41a_firmware 2308937_578492, 2405129_000066
  • hp g1w41v_firmware 2308937_578492, 2405129_000066
  • hp j7z06a_firmware 2405087_018564
  • hp g1w46a_firmware 2308937_578491, 2405129_000051
  • hp g1w46v_firmware 2308937_578491, 2405129_000051
  • hp g1w47v_firmware 2308937_578491, 2405129_000051
  • hp l3u44a_firmware 2308937_578491, 2405129_000051

Exploit prediction

9.92% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • HP Inc. HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.