PT-2018-7182
CVE-2017-2747
·
Published
2018-01-23
·
Updated
2019-10-03
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
DesignJet T790, T795, T1300, T2300 versions before IG 11 00 00.10
DesignJet T920, T930, T1500, T1530, T2500, T2530 versions before MRY 04 05 00.5
DesignJet T3500 version before AENEAS 03 04 00.9
Latex 310, 330, 360, 370 versions before NEXUS 01 12 00.11
Latex 315, 335, 365, 375 versions before NEXUS 03 12 00.15
Latex 560, 570 version before STORM 00 05 01.6
Latex 110 version before STORM 00 05 01.6
Description:
A potential security issue may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.
Recommendations:
For DesignJet T790, T795, T1300, T2300 versions before IG 11 00 00.10, update to a version after IG 11 00 00.10.
For DesignJet T920, T930, T1500, T1530, T2500, T2530 versions before MRY 04 05 00.5, update to a version after MRY 04 05 00.5.
For DesignJet T3500 version before AENEAS 03 04 00.9, update to a version after AENEAS 03 04 00.9.
For Latex 310, 330, 360, 370 versions before NEXUS 01 12 00.11, update to a version after NEXUS 01 12 00.11.
For Latex 315, 335, 365, 375 versions before NEXUS 03 12 00.15, update to a version after NEXUS 03 12 00.15.
For Latex 560, 570 version before STORM 00 05 01.6, update to a version after STORM 00 05 01.6.
For Latex 110 version before STORM 00 05 01.6, update to a version after STORM 00 05 01.6.
Found an issue in the description? Have something to add? Feel free to write us 👾