Certain HP LaserJet Pro Printers – Potential Information Disclosure

Summary

CVECVE-2025-12785
StatePUBLISHED
Assignerhp
Source PriorityCVE Program / NVD first with legacy fallback
Published2025-11-13 18:15:49 UTC
Updated2026-10-18 20:10:00 UTC
DescriptionCertain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

Risk And Classification

Primary CVSS: v4.0 6.9 MEDIUM from [email protected]

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS: 0.003270000 probability, percentile 0.242500000 (date 2026-10-18)

Problem Types: CWE-200 | NVD-CWE-noinfo | CWE-200 CWE-200 Exposure of Sensitive Information to an Unauthorized Actor


VersionSourceTypeScoreSeverityVector
4.0[email protected]Secondary6.9MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/C...
4.0CNACVSS6.9MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3.1[email protected]Primary7.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v4.0 Breakdown

Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
High
User Interaction
None
Confidentiality
High
Integrity
None
Availability
None
Sub Conf.
None
Sub Integrity
None
Sub Availability
None

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 Breakdown

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Hardware Hp 7kw48a - All All All
Operating System Hp 7kw48a Firmware All All All All
Hardware Hp 7kw49a - All All All
Operating System Hp 7kw49a Firmware All All All All
Hardware Hp 7kw50a - All All All
Operating System Hp 7kw50a Firmware All All All All
Hardware Hp 7kw51a - All All All
Operating System Hp 7kw51a Firmware All All All All
Hardware Hp 7kw54a - All All All
Operating System Hp 7kw54a Firmware All All All All
Hardware Hp 7kw55a - All All All
Operating System Hp 7kw55a Firmware All All All All
Hardware Hp 7kw56a - All All All
Operating System Hp 7kw56a Firmware All All All All
Hardware Hp 7kw57a - All All All
Operating System Hp 7kw57a Firmware All All All All
Hardware Hp 7kw58a - All All All
Operating System Hp 7kw58a Firmware All All All All
Hardware Hp 7kw59a - All All All
Operating System Hp 7kw59a Firmware All All All All
Hardware Hp 7kw63a - All All All
Operating System Hp 7kw63a Firmware All All All All
Hardware Hp 7kw64a - All All All
Operating System Hp 7kw64a Firmware All All All All
Hardware Hp 7kw65a - All All All
Operating System Hp 7kw65a Firmware All All All All
Hardware Hp 7kw66a - All All All
Operating System Hp 7kw66a Firmware All All All All
Hardware Hp 7kw67a - All All All
Operating System Hp 7kw67a Firmware All All All All
Hardware Hp 7kw68a - All All All
Operating System Hp 7kw68a Firmware All All All All
Hardware Hp 7kw72a - All All All
Operating System Hp 7kw72a Firmware All All All All
Hardware Hp 7kw73a - All All All
Operating System Hp 7kw73a Firmware All All All All
Hardware Hp 7kw74a - All All All
Operating System Hp 7kw74a Firmware All All All All
Hardware Hp 7kw75a - All All All
Operating System Hp 7kw75a Firmware All All All All
Hardware Hp 7kw76a - All All All
Operating System Hp 7kw76a Firmware All All All All
Hardware Hp 7kw77a - All All All
Operating System Hp 7kw77a Firmware All All All All
Hardware Hp 7kw78a - All All All
Operating System Hp 7kw78a Firmware All All All All
Hardware Hp 7kw79a - All All All
Operating System Hp 7kw79a Firmware All All All All
Hardware Hp 93m22a - All All All
Operating System Hp 93m22a Firmware All All All All
Hardware Hp W1a28a - All All All
Operating System Hp W1a28a Firmware All All All All
Hardware Hp W1a29a - All All All
Operating System Hp W1a29a Firmware All All All All
Hardware Hp W1a30a - All All All
Operating System Hp W1a30a Firmware All All All All
Hardware Hp W1a31a - All All All
Operating System Hp W1a31a Firmware All All All All
Hardware Hp W1a32a - All All All
Operating System Hp W1a32a Firmware All All All All
Hardware Hp W1a33a - All All All
Operating System Hp W1a33a Firmware All All All All
Hardware Hp W1a34a - All All All
Operating System Hp W1a34a Firmware All All All All
Hardware Hp W1a35a - All All All
Operating System Hp W1a35a Firmware All All All All
Hardware Hp W1a38a - All All All
Operating System Hp W1a38a Firmware All All All All
Hardware Hp W1a46a - All All All
Operating System Hp W1a46a Firmware All All All All
Hardware Hp W1a47a - All All All
Operating System Hp W1a47a Firmware All All All All
Hardware Hp W1a48a - All All All
Operating System Hp W1a48a Firmware All All All All
Hardware Hp W1a51a - All All All
Operating System Hp W1a51a Firmware All All All All
Hardware Hp W1a52a - All All All
Operating System Hp W1a52a Firmware All All All All
Hardware Hp W1a53a - All All All
Operating System Hp W1a53a Firmware All All All All
Hardware Hp W1a56a - All All All
Operating System Hp W1a56a Firmware All All All All
Hardware Hp W1a57a - All All All
Operating System Hp W1a57a Firmware All All All All
Hardware Hp W1a58a - All All All
Operating System Hp W1a58a Firmware All All All All
Hardware Hp W1a59a - All All All
Operating System Hp W1a59a Firmware All All All All
Hardware Hp W1a60a - All All All
Operating System Hp W1a60a Firmware All All All All
Hardware Hp W1a63a - All All All
Operating System Hp W1a63a Firmware All All All All
Hardware Hp W1a66a - All All All
Operating System Hp W1a66a Firmware All All All All
Hardware Hp W1a75a - All All All
Operating System Hp W1a75a Firmware All All All All
Hardware Hp W1a76a - All All All
Operating System Hp W1a76a Firmware All All All All
Hardware Hp W1a77a - All All All
Operating System Hp W1a77a Firmware All All All All
Hardware Hp W1a78a - All All All
Operating System Hp W1a78a Firmware All All All All
Hardware Hp W1a79a - All All All
Operating System Hp W1a79a Firmware All All All All
Hardware Hp W1a80a - All All All
Operating System Hp W1a80a Firmware All All All All
Hardware Hp W1a81a - All All All
Operating System Hp W1a81a Firmware All All All All
Hardware Hp W1a82a - All All All
Operating System Hp W1a82a Firmware All All All All
Hardware Hp W1y40a - All All All
Operating System Hp W1y40a Firmware All All All All
Hardware Hp W1y41a - All All All
Operating System Hp W1y41a Firmware All All All All
Hardware Hp W1y43a - All All All
Operating System Hp W1y43a Firmware All All All All
Hardware Hp W1y44a - All All All
Operating System Hp W1y44a Firmware All All All All
Hardware Hp W1y45a - All All All
Operating System Hp W1y45a Firmware All All All All
Hardware Hp W1y46a - All All All
Operating System Hp W1y46a Firmware All All All All
Hardware Hp W1y47a - All All All
Operating System Hp W1y47a Firmware All All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA HP Inc HP Color LaserJet MFP M478-M479 Series affected 002_2539E custom Not specified
CNA HP Inc HP Color LaserJet Pro M453-M454 Series affected 002_2539E custom Not specified
CNA HP Inc HP LaserJet Pro M304-M305 Printer Series affected 002_2539E custom Not specified
CNA HP Inc HP LaserJet Pro M404-M405 Printer Series affected 002_2539E custom Not specified
CNA HP Inc HP LaserJet Pro MFP M428-M429 F Series affected 002_2539E custom Not specified
CNA HP Inc HP LaserJet Pro MFP M428-M429 Series affected 002_2539E custom Not specified

References

ReferenceSourceLinkTags
support.hp.com/us-en/document/ish_13229161-13229183-16/hpsbpi04074 [email protected] support.hp.com Vendor Advisory
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report