Certain HP LaserJet Pro Printers – Potential Information Disclosure
Priority LOW 30CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-200.
Summary
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00327 25th percentileScored 2026-11-07
Fix Fixed HP Color LaserJet MFP M478-M479 series (HP Inc): 002_2539EHP Color LaserJet Pro M453-M454 series (HP Inc): 002_2539E+4 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hewlett Packard Enterprise | HP Color LaserJet MFP M478-M479 series | before 002_2539E | 002_2539E | Patch available | CNA |
| Hewlett Packard Enterprise | HP Color LaserJet Pro M453-M454 series | before 002_2539E | 002_2539E | Patch available | CNA |
| Hewlett Packard Enterprise | HP LaserJet Pro M304-M305 Printer series | before 002_2539E | 002_2539E | Patch available | CNA |
| Hewlett Packard Enterprise | HP LaserJet Pro M404-M405 Printer series | before 002_2539E | 002_2539E | Patch available | CNA |
| Hewlett Packard Enterprise | HP LaserJet Pro MFP M428-M429 f series | before 002_2539E | 002_2539E | Patch available | CNA |
| Hewlett Packard Enterprise | HP LaserJet Pro MFP M428-M429 series | before 002_2539E | 002_2539E | Patch available | CNA |
- HP Color LaserJet MFP M478-M479 series VendorHewlett Packard Enterprise Affected before 002_2539E Fixed in 002_2539E Patch available CNA
- HP Color LaserJet Pro M453-M454 series VendorHewlett Packard Enterprise Affected before 002_2539E Fixed in 002_2539E Patch available CNA
- HP LaserJet Pro M304-M305 Printer series VendorHewlett Packard Enterprise Affected before 002_2539E Fixed in 002_2539E Patch available CNA
- HP LaserJet Pro M404-M405 Printer series VendorHewlett Packard Enterprise Affected before 002_2539E Fixed in 002_2539E Patch available CNA
- HP LaserJet Pro MFP M428-M429 f series VendorHewlett Packard Enterprise Affected before 002_2539E Fixed in 002_2539E Patch available CNA
- HP LaserJet Pro MFP M428-M429 series VendorHewlett Packard Enterprise Affected before 002_2539E Fixed in 002_2539E Patch available CNA
CPE configurations NVD · 124
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hp:w1y47a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1y47a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw48a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw48a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw49a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw49a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw50a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw50a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw51a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw51a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
- cpe:2.3:o:hp:w1y47a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1y47a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw48a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw48a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw49a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw49a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw50a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw50a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw51a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw51a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
Show 114 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hp:7kw54a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw54a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw55a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw55a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw56a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw56a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw57a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw57a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw58a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw58a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw59a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw59a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw63a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw63a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw64a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw64a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw65a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw65a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw66a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw66a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw67a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw67a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw68a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw68a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw72a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw72a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw73a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw73a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw74a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw74a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw75a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw75a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw76a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw76a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw77a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw77a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw78a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw78a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:7kw79a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:7kw79a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:93m22a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:93m22a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a28a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a28a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a29a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a29a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a30a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a30a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a31a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a31a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a32a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a32a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a33a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a33a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a34a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a34a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a35a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a35a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a38a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a38a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a46a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a46a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a47a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a47a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a48a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a48a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a51a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a51a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a52a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a52a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a53a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a53a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a56a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a56a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a57a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a57a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a58a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a58a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a59a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a59a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a60a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a60a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a63a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a63a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a66a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a66a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a75a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a75a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a76a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a76a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a77a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a77a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a78a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a78a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a79a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a79a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a80a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a80a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a81a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a81a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1a82a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1a82a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1y40a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1y40a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1y41a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1y41a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1y43a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1y43a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1y44a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1y44a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1y45a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1y45a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:o:hp:w1y46a_firmware:*:*:*:*:*:*:*:* | before 002.2539e | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:h:hp:w1y46a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
- cpe:2.3:o:hp:7kw54a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw54a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw55a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw55a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw56a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw56a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw57a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw57a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw58a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw58a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw59a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw59a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw63a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw63a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw64a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw64a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw65a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw65a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw66a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw66a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw67a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw67a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw68a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw68a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw72a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw72a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw73a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw73a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw74a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw74a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw75a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw75a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw76a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw76a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw77a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw77a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw78a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw78a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:7kw79a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:7kw79a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:93m22a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:93m22a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a28a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a28a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a29a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a29a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a30a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a30a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a31a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a31a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a32a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a32a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a33a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a33a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a34a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a34a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a35a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a35a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a38a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a38a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a46a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a46a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a47a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a47a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a48a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a48a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a51a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a51a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a52a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a52a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a53a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a53a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a56a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a56a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a57a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a57a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a58a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a58a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a59a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a59a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a60a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a60a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a63a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a63a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a66a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a66a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a75a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a75a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a76a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a76a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a77a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a77a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a78a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a78a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a79a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a79a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a80a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a80a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a81a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a81a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1a82a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1a82a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1y40a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1y40a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1y41a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1y41a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1y43a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1y43a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1y44a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1y44a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1y45a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1y45a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:o:hp:w1y46a_firmware:*:*:*:*:*:*:*:* Versions before 002.2539e Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:h:hp:w1y46a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
Remediation
- Fix · CNA HP Color LaserJet MFP M478-M479 series (HP Inc) Fixed in 002_2539E
- Fix · CNA HP Color LaserJet Pro M453-M454 series (HP Inc) Fixed in 002_2539E
- Fix · CNA HP LaserJet Pro M304-M305 Printer series (HP Inc) Fixed in 002_2539E
- Fix · CNA HP LaserJet Pro M404-M405 Printer series (HP Inc) Fixed in 002_2539E
- Fix · CNA HP LaserJet Pro MFP M428-M429 f series (HP Inc) Fixed in 002_2539E
- Fix · CNA HP LaserJet Pro MFP M428-M429 series (HP Inc) Fixed in 002_2539E
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
HP Color LaserJet MFP M478-M479 series, HP Color LaserJet Pro M453-M454 series and 4 more products 002_2539E
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2025-11716 Certain HP LaserJet Pro Printers – Potential Information DisclosurePriority LOW 30
Timeline
- 2026-10-02 Threatist record created from CVE-2025-12785
- 2026-10-03 Alias added: GHSA-rfj8-8392-mfcm
References
More Hewlett Packard Enterprise 7kw48a Firmware vulnerabilities
- TI-2025-11716 Certain HP LaserJet Pro Printers – Potential Information Disclosure CVSS 4.0MEDIUM 6.9
Sources
- CVE-2025-12785 · CVE Program
- CVE-2025-12785 · NVD
- FIRST EPSS
- GHSA-rfj8-8392-mfcm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences