Read the docs
TI-2012-04407 Aliases CVE-2012-5221GHSA-pfmf-q62w-88j9

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP…

Priority LOW 31Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.

Why it matters now

EPSS 0.05044 92nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:h:hp:color_laserjet_3000:q7534a:*:*:*:*:*:*:*q7534aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_3800:q5981a:*:*:*:*:*:*:*q5981aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_4700:q7492a:*:*:*:*:*:*:*q7492aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_4730_mfp:cb480a:*:*:*:*:*:*:*cb480aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_5550:q3714a:*:*:*:*:*:*:*q3714aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_9500_mfp:c8549a:*:*:*:*:*:*:*c8549aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_cm6030_mfp:ce664a:*:*:*:*:*:*:*ce664aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_cm6040_mfp:q3939a:*:*:*:*:*:*:*q3939aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_cp3505:cb442a:*:*:*:*:*:*:*cb442aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_cp3525:cc469a:*:*:*:*:*:*:*cc469aVulnerableHewlett Packard Enterprise
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:hp:color_laserjet_cp4005:cb503a:*:*:*:*:*:*:*cb503aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_cp6015:q3932a:*:*:*:*:*:*:*q3932aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_enterprise_cp4025:cc490a:*:*:*:*:*:*:*cc490aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:color_laserjet_enterprise_cp4525:cc493a:*:*:*:*:*:*:*cc493aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:digital_sender_9250c:cb472a:*:*:*:*:*:*:*cb472aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_4240:q7785a:*:*:*:*:*:*:*q7785aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_4250:q5400a:*:*:*:*:*:*:*q5400aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_4345_mfp:q3942a:*:*:*:*:*:*:*q3942aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_4350:q5407a:*:*:*:*:*:*:*q5407aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_5200l:q7543a:*:*:*:*:*:*:*q7543aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_5200n:q7543a:*:*:*:*:*:*:*q7543aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_9040:q7697a:*:*:*:*:*:*:*q7697aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_9040_mfp:q3721a:*:*:*:*:*:*:*q3721aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_9050:q7697a:*:*:*:*:*:*:*q7697aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_9050_mfp:q3721a:*:*:*:*:*:*:*q3721aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_enterprise_p3015:ce526a:*:*:*:*:*:*:*ce526aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m3027_mfp:cb416a:*:*:*:*:*:*:*cb416aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m3035_mfp:cb414a:*:*:*:*:*:*:*cb414aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m3035_mfp:cc519a:*:*:*:*:*:*:*cc519aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m4345_mfp:cb425a:*:*:*:*:*:*:*cb425aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m5025_mfp:q7840a:*:*:*:*:*:*:*q7840aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m5035_mfp:q7829a:*:*:*:*:*:*:*q7829aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m9040_mpf:cc394a:*:*:*:*:*:*:*cc394aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_m9050_mpf:cc395a:*:*:*:*:*:*:*cc395aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_p3005:q7812a:*:*:*:*:*:*:*q7812aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_p4014:cb507a:*:*:*:*:*:*:*cb507aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_p4015:cb509a:*:*:*:*:*:*:*cb509aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_p4515:cb514a:*:*:*:*:*:*:*cb514aVulnerableHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5221
  2. 2026-10-03 Alias added: GHSA-pfmf-q62w-88j9
  3. 2026-10-13 EPSS moved to the 90th–95th percentile

References

Advisory 2

  • TI-2011-03670 The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx… CVSS 2.0HIGH 10.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences