CVE-2017-2747 — HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers

Back Back to CVE browser

HIGH

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers

Published Jan 23, 2018

7.8

HIGH

CVSS 3.0

EPSS 1.82%

Description

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

Affected products

Vendor HP Inc. Product HP Designjet printers; HP Latex printers Default
n/a
- Version
  NEXUS_01_12_00.11, NEXUS_03_12_00.15, and STORM_00_05_01.6
  Status
  affected
  Constraints
  -
- Version
  fixed in IG_11_00_00.10, MRY_04_05_00.5, and AENEAS_03_04_00.9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HP Inc.

HP Designjet printers; HP Latex printers

n/a

Version	Status	Constraints
NEXUS_01_12_00.11, NEXUS_03_12_00.15, and STORM_00_05_01.6	affected	-
fixed in IG_11_00_00.10, MRY_04_05_00.5, and AENEAS_03_04_00.9	affected	-

Configuration 1

HP / T790 Firmware OS

≤ ig_11_00_00.09

Running on/with

HP / T790 Hardware

n/a

Configuration 2

HP / T795 Firmware OS

≤ ig_11_00_00.09

Running on/with

HP / T795 Hardware

n/a

Configuration 3

HP / T1300 Firmware OS

≤ ig_11_00_00.09

Running on/with

HP / T1300 Hardware

n/a

Configuration 4

HP / T2300 Firmware OS

≤ ig_11_00_00.09

Running on/with

HP / T2300 Hardware

n/a

Configuration 5

HP / T920 Firmware OS

≤ mry_04_05_00.4

Running on/with

HP / T920 Hardware

n/a

Configuration 6

HP / T930 Firmware OS

≤ mry_04_05_00.4

Running on/with

HP / T930 Hardware

n/a

Configuration 7

HP / T1500 Firmware OS

≤ mry_04_05_00.4

Running on/with

HP / T1500 Hardware

n/a

Configuration 8

HP / T1530 Firmware OS

≤ mry_04_05_00.4

Running on/with

HP / T1530 Hardware

n/a

Configuration 9

HP / T2500 Firmware OS

≤ mry_04_05_00.4

Running on/with

HP / T2500 Hardware

n/a

Configuration 10

HP / T2530 Firmware OS

≤ mry_04_05_00.4

Running on/with

HP / T2530 Hardware

n/a

Configuration 11

HP / T3500 Firmware OS

≤ aeneas_03_04_00.8

Running on/with

HP / T3500 Hardware

n/a

Configuration 12

HP / 110 Firmware OS

≤ nexus_00_04_53.8

Running on/with

HP / 110 Hardware

n/a

Configuration 13

HP / 310 Firmware OS

≤ nexus_01_12_00.10

Running on/with

HP / 310 Hardware

n/a

Configuration 14

HP / 330 Firmware OS

≤ nexus_01_12_00.10

Running on/with

HP / 330 Hardware

n/a

Configuration 15

HP / 360 Firmware OS

≤ nexus_01_12_00.10

Running on/with

HP / 360 Hardware

n/a

Configuration 16

HP / 370 Firmware OS

≤ nexus_01_12_00.10

Running on/with

HP / 370 Hardware

n/a

Configuration 17

HP / 315 Firmware OS

≤ nexus_03_12_00.14

Running on/with

HP / 315 Hardware

n/a

Configuration 18

HP / 335 Firmware OS

≤ nexus_03_12_00.14

Running on/with

HP / 335 Hardware

n/a

Configuration 19

HP / 365 Firmware OS

≤ nexus_03_12_00.14

Running on/with

HP / 365 Hardware

n/a

Configuration 20

HP / 375 Firmware OS

≤ nexus_03_12_00.14

Running on/with

HP / 375 Hardware

n/a

Configuration 21

HP / 560 Firmware OS

≤ storm_00_05_01.5

Running on/with

HP / 560 Hardware

n/a

Configuration 22

HP / 570 Firmware OS

≤ storm_00_05_01.5

Running on/with

HP / 570 Hardware

n/a

Remediation

No remediation recorded yet.

Metrics

1.82% 0.01824

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01824

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.82% (0.01824)	78.01th	v5 (v2026.06.15)
Jun 15, 2026	1.86% (0.01859)	76.40th	v5 (v2026.06.15)
Mar 17, 2025	0.14% (0.00141)	31.57th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	14.58th	v3 (v2023.03.01)
May 25, 2024	0.04% (0.00044)	12.27th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	10.26th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	2.06% (0.02063)	50.26th	v5 (v2026.06.15)
Apr 14, 2021	2.06% (0.02063)	0.00th	v1

Weaknesses (0)

No CWE recorded.

References (1)

https://support.hp.com/us-en/document/c05624457
vendor-advisoryx_refsource_HPVendor Advisory

Link	Providers	Tags
https://support.hp.com/us-en/document/c05624457		vendor-advisoryx_refsource_HPVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hp

Published Jan 23, 2018

Updated Sep 16, 2024

Reserved Dec 1, 2016

Link CVE-2017-2747

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-2747

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-2747