Vulnerability-Lookup

WID-SEC-W-2025-2599

Vulnerability from csaf_certbund - Published: 2025-11-13 23:00 - Updated: 2025-11-13 23:00

Summary

HP LaserJet: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: HP Laserjet ist die Laserdrucker-Produktreihe des Herstellers Hewlett Packard.

Angriff: Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in HP LaserJet ausnutzen, um Informationen offenzulegen.

Betroffene Betriebssysteme: - Hardware Appliance

CVE-2025-12784

Affected products

Known affected 6 products

Product	Identifier	Version
HP LaserJet Pro MFP M428-M429 f HP / LaserJet	`cpe:/h:hp:laserjet:pro_mfp_m428-m429_f`	Pro MFP M428-M429 f
HP LaserJet Pro M404-M405 HP / LaserJet	`cpe:/h:hp:laserjet:pro_m404-m405`	Pro M404-M405
HP LaserJet MFP M478-M479 HP / LaserJet	`cpe:/h:hp:laserjet:mfp_m478-m479`	MFP M478-M479
HP LaserJet Pro M453-M454 HP / LaserJet	`cpe:/h:hp:laserjet:pro_m453-m454`	Pro M453-M454
HP LaserJet Pro MFP M428-M429 HP / LaserJet	`cpe:/h:hp:laserjet:pro_mfp_m428-m429`	Pro MFP M428-M429
HP LaserJet Pro M304-M305 HP / LaserJet	`cpe:/h:hp:laserjet:pro_m304-m305`	Pro M304-M305

CVE-2025-12785

Affected products

Known affected 6 products

Product	Identifier	Version
HP LaserJet Pro MFP M428-M429 f HP / LaserJet	`cpe:/h:hp:laserjet:pro_mfp_m428-m429_f`	Pro MFP M428-M429 f
HP LaserJet Pro M404-M405 HP / LaserJet	`cpe:/h:hp:laserjet:pro_m404-m405`	Pro M404-M405
HP LaserJet MFP M478-M479 HP / LaserJet	`cpe:/h:hp:laserjet:mfp_m478-m479`	MFP M478-M479
HP LaserJet Pro M453-M454 HP / LaserJet	`cpe:/h:hp:laserjet:pro_m453-m454`	Pro M453-M454
HP LaserJet Pro MFP M428-M429 HP / LaserJet	`cpe:/h:hp:laserjet:pro_mfp_m428-m429`	Pro MFP M428-M429
HP LaserJet Pro M304-M305 HP / LaserJet	`cpe:/h:hp:laserjet:pro_m304-m305`	Pro M304-M305

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.hp.com/de-de/document/ish_1322916…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "HP Laserjet ist die Laserdrucker-Produktreihe des Herstellers Hewlett Packard.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in HP LaserJet ausnutzen, um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Hardware Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-2599 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2599.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-2599 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2599"
      },
      {
        "category": "external",
        "summary": "HP Security Advisory vom 2025-11-13",
        "url": "https://support.hp.com/de-de/document/ish_13229161-13229183-16/HPSBPI04074"
      }
    ],
    "source_lang": "en-US",
    "title": "HP LaserJet: Mehrere Schwachstellen erm\u00f6glichen Offenlegung von Informationen",
    "tracking": {
      "current_release_date": "2025-11-13T23:00:00.000+00:00",
      "generator": {
        "date": "2025-11-14T08:57:18.879+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2025-2599",
      "initial_release_date": "2025-11-13T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-11-13T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Pro M304-M305",
                "product": {
                  "name": "HP LaserJet Pro M304-M305",
                  "product_id": "T048601",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:laserjet:pro_m304-m305"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Pro M453-M454",
                "product": {
                  "name": "HP LaserJet Pro M453-M454",
                  "product_id": "T048602",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:laserjet:pro_m453-m454"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MFP M478-M479",
                "product": {
                  "name": "HP LaserJet MFP M478-M479",
                  "product_id": "T048603",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:laserjet:mfp_m478-m479"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Pro M404-M405",
                "product": {
                  "name": "HP LaserJet Pro M404-M405",
                  "product_id": "T048604",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:laserjet:pro_m404-m405"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Pro MFP M428-M429 f",
                "product": {
                  "name": "HP LaserJet Pro MFP M428-M429 f",
                  "product_id": "T048605",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:laserjet:pro_mfp_m428-m429_f"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Pro MFP M428-M429",
                "product": {
                  "name": "HP LaserJet Pro MFP M428-M429",
                  "product_id": "T048606",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hp:laserjet:pro_mfp_m428-m429"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LaserJet"
          }
        ],
        "category": "vendor",
        "name": "HP"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-12784",
      "product_status": {
        "known_affected": [
          "T048605",
          "T048604",
          "T048603",
          "T048602",
          "T048606",
          "T048601"
        ]
      },
      "release_date": "2025-11-13T23:00:00.000+00:00",
      "title": "CVE-2025-12784"
    },
    {
      "cve": "CVE-2025-12785",
      "product_status": {
        "known_affected": [
          "T048605",
          "T048604",
          "T048603",
          "T048602",
          "T048606",
          "T048601"
        ]
      },
      "release_date": "2025-11-13T23:00:00.000+00:00",
      "title": "CVE-2025-12785"
    }
  ]
}

CVE-2025-12784 (GCVE-0-2025-12784)

Vulnerability from cvelistv5 – Published: 2025-11-13 17:35 – Updated: 2025-11-13 18:03

Title

Certain HP LaserJet Pro Printers – Potential Information Disclosure

Summary

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_1322916…

Impacted products

6 products

Vendor	Product	Version
HP Inc	HP Color LaserJet MFP M478-M479 series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP Color LaserJet Pro M453-M454 series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro M304-M305 Printer series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro M404-M405 Printer series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro MFP M428-M429 f series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro MFP M428-M429 series	Affected: 0 , < 002_2539E (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-12784",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-13T18:03:01.465233Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-13T18:03:11.167Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "HP Color LaserJet MFP M478-M479 series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP Color LaserJet Pro M453-M454 series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro M304-M305 Printer series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro M404-M405 Printer series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro MFP M428-M429 f series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro MFP M428-M429 series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_color_laserjet_mfp_m478-m479_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_color_laserjet_pro_m453-m454_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_m304-m305_printer_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_m404-m405_printer_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_mfp_m428-m429_f_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_mfp_m428-m429_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server."
            }
          ],
          "value": "Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-13T17:35:09.424Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_13229161-13229183-16/hpsbpi04074"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Certain HP LaserJet Pro Printers \u2013 Potential Information Disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2025-12784",
    "datePublished": "2025-11-13T17:35:09.424Z",
    "dateReserved": "2025-11-05T22:37:06.808Z",
    "dateUpdated": "2025-11-13T18:03:11.167Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-12785 (GCVE-0-2025-12785)

Vulnerability from cvelistv5 – Published: 2025-11-13 17:38 – Updated: 2025-11-13 18:03

Title

Certain HP LaserJet Pro Printers – Potential Information Disclosure

Summary

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_1322916…

Impacted products

6 products

Vendor	Product	Version
HP Inc	HP Color LaserJet MFP M478-M479 series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP Color LaserJet Pro M453-M454 series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro M304-M305 Printer series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro M404-M405 Printer series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro MFP M428-M429 f series	Affected: 0 , < 002_2539E (custom)
HP Inc	HP LaserJet Pro MFP M428-M429 series	Affected: 0 , < 002_2539E (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-12785",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-13T18:03:38.011752Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-13T18:03:55.247Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "HP Color LaserJet MFP M478-M479 series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP Color LaserJet Pro M453-M454 series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro M304-M305 Printer series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro M404-M405 Printer series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro MFP M428-M429 f series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HP LaserJet Pro MFP M428-M429 series",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "002_2539E",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_color_laserjet_mfp_m478-m479_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_color_laserjet_pro_m453-m454_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_m304-m305_printer_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_m404-m405_printer_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_mfp_m428-m429_f_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:hp_inc:hp_laserjet_pro_mfp_m428-m429_series:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "002_2539e",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. \u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-13T17:38:09.461Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_13229161-13229183-16/hpsbpi04074"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Certain HP LaserJet Pro Printers \u2013 Potential Information Disclosure",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2025-12785",
    "datePublished": "2025-11-13T17:38:09.461Z",
    "dateReserved": "2025-11-05T22:37:08.149Z",
    "dateUpdated": "2025-11-13T18:03:55.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2025-2599

CVE-2025-12784 (GCVE-0-2025-12784)

CVE-2025-12785 (GCVE-0-2025-12785)

Tags

Sightings

Nomenclature