Exploitation Summary
EIP tracks 4 public exploits for CVE-2017-2741.
PoCs published by Metasploit, Jacob Baines, dopheide-esnet, including Metasploit module exploits/linux/misc/hp_jetdirect_path_traversal.
AI-analyzed exploit summary This Metasploit module exploits a path traversal vulnerability in HP Jetdirect printers to write a malicious shell script to /etc/profile.d/ and restart the printer via SNMP, achieving arbitrary code execution.
Description
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
Exploits (4)
This Metasploit module exploits a path traversal vulnerability in HP Jetdirect printers to write a malicious shell script to /etc/profile.d/ and restart the printer via SNMP, achieving arbitrary code execution.
This exploit targets CVE-2017-2741 in HP OfficeJet 8210 printers by uploading a malicious script to the profile.d directory via PJL commands, then triggering a reboot via SNMP to execute a bind shell on port 1270.
This repository contains documentation and helper scripts for Zeek (formerly Bro) related to CVE-2017-2741, but no actual exploit code. The files include installation scripts, Sphinx documentation configuration, and build/test helpers.
This Metasploit module exploits a path traversal vulnerability in HP Jetdirect printers to achieve arbitrary code execution by writing a shell script to /etc/profile.d and restarting the printer via SNMP.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H