CVE-2025-12784

MediumCVSS 4.9

Published: 13/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. This may result in interception of authentication data.

Risk Assessment

An attacker may obtain user or service credentials, potentially enabling further access to organizational systems and resources.

Recommendation

Update HP LaserJet Pro printer firmware per HP guidance. Secure scan and LDAP configuration and restrict access to the printer administration panel.

Other vulnerabilities in HP LaserJet Pro

CVE-2023-35178High
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.

Original NVD description (English source)

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS