{"cve":"CVE-2017-2747","nvd":{"published":"2018-01-23T16:29:01.570","modified":"2026-06-17T01:16:47.770","status":"Modified","description":"HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":[],"references":["https://support.hp.com/us-en/document/c05624457","https://support.hp.com/us-en/document/c05624457"],"products":["hp:110_firmware","hp:310_firmware","hp:315_firmware","hp:330_firmware","hp:335_firmware","hp:360_firmware","hp:365_firmware","hp:370_firmware","hp:375_firmware","hp:560_firmware","hp:570_firmware","hp:t1300_firmware","hp:t1500_firmware","hp:t1530_firmware","hp:t2300_firmware","hp:t2500_firmware","hp:t2530_firmware","hp:t3500_firmware","hp:t790_firmware","hp:t795_firmware","hp:t920_firmware","hp:t930_firmware"],"source":"nvd","synced_at":"2026-10-19T20:48:34.567387330+00:00"},"epss":{"cve":"CVE-2017-2747","score":0.01824,"percentile":0.788,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}