HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color…
Priority LOW 9CWE-200Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors.
Why it matters now
EPSS 0.00324 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 22
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:hp:color_laserjet_cm4540:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_cm4540f:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_cm4540fskm:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_m575dn:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_m575f:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_m775dn:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_m775f:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_m775z:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:color_laserjet_m775z\+:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_enterprise_color_flow_m575c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:h:hp:color_laserjet_cm4540:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_cm4540f:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_cm4540fskm:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_m575dn:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_m575f:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_m775dn:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_m775f:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_m775z:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:color_laserjet_m775z\+:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_enterprise_color_flow_m575c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
Show 12 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:hp:laserjet_flow_m525c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m4555:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m4555f:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m4555fskm:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m4555h:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m525dn:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m525f:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m725dn:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m725f:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m725z:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:laserjet_m725z\+:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:scanjet_enterprise_8500fn1:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:h:hp:laserjet_flow_m525c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m4555:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m4555f:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m4555fskm:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m4555h:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m525dn:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m525f:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m725dn:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m725f:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m725z:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:laserjet_m725z\+:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:scanjet_enterprise_8500fn1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-4829
- 2026-10-03 Alias added: GHSA-2gx8-xhw2-36fx
References
Advisory 1
More Hewlett Packard Enterprise Color Laserjet Cm4540 vulnerabilities
- TI-2011-03670 The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx… CVSS 2.0HIGH 10.0
- TI-2013-04236 HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2013-4829 · CVE Program
- CVE-2013-4829 · NVD
- FIRST EPSS
- GHSA-2gx8-xhw2-36fx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences