CVE-2023-26301
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege...
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.
- Record
CVE-2023-26301- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
CVE List No score
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.
- Record
CVE-2023-26301- Updated
- 2026-11-02
EUVDEUVD-2023-30124
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.
- Record
EUVD-2023-30124- CVSS
- 0.0 None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-225m-c7c9-rg4x
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege...
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.
- Record
GHSA-225m-c7c9-rg4x- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
Affected products
- hp laserjet pro
- hp color laserjet pro 4201-4203 4ra87f firmware
- hp color laserjet pro 4201-4203 4ra88f firmware
- hp color laserjet pro 4201-4203 4ra89a firmware
- hp color laserjet pro 4201-4203 5hh48a firmware
- hp color laserjet pro 4201-4203 5hh51a firmware
- hp color laserjet pro 4201-4203 5hh52a firmware
- hp color laserjet pro 4201-4203 5hh53a firmware
- hp color laserjet pro 4201-4203 5hh59a firmware
- hp color laserjet pro mfp 4301-4303 4ra80f firmware
- hp color laserjet pro mfp 4301-4303 4ra81f firmware
- hp color laserjet pro mfp 4301-4303 4ra82f firmware
Show 9 moreShow less
- hp color laserjet pro mfp 4301-4303 4ra83f firmware
- hp color laserjet pro mfp 4301-4303 4ra84f firmware
- hp color laserjet pro mfp 4301-4303 5hh64f firmware
- hp color laserjet pro mfp 4301-4303 5hh65a firmware
- hp color laserjet pro mfp 4301-4303 5hh66a firmware
- hp color laserjet pro mfp 4301-4303 5hh67a firmware
- hp color laserjet pro mfp 4301-4303 5hh72a firmware
- hp color laserjet pro mfp 4301-4303 5hh73a firmware
- hp inc. laserjet pro
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-26301 is a critical vulnerability (CVSS 9.8) in Hp Laserjet Pro, published July 21, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. No source names a fixed version.