CVE-2025-12785
Certain HP LaserJet Pro Printers – Potential Information Disclosure
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Certain HP LaserJet Pro Printers – Potential Information Disclosure
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
- Record
CVE-2025-12785- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2025-175347
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
- Record
EUVD-2025-175347- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rfj8-8392-mfcm
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to...
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
- Record
GHSA-rfj8-8392-mfcm- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
- Record
CVE-2025-12785- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- hp 7kw48a firmware
- hp 7kw49a firmware
- hp 7kw50a firmware
- hp 7kw51a firmware
- hp 7kw54a firmware
- hp 7kw55a firmware
- hp 7kw56a firmware
- hp 7kw57a firmware
- hp 7kw58a firmware
- hp 7kw59a firmware
- hp 7kw63a firmware
- hp 7kw64a firmware
Show 56 moreShow less
- hp 7kw65a firmware
- hp 7kw66a firmware
- hp 7kw67a firmware
- hp 7kw68a firmware
- hp 7kw72a firmware
- hp 7kw73a firmware
- hp 7kw74a firmware
- hp 7kw75a firmware
- hp 7kw76a firmware
- hp 7kw77a firmware
- hp 7kw78a firmware
- hp 7kw79a firmware
- hp 93m22a firmware
- hp w1a28a firmware
- hp w1a29a firmware
- hp w1a30a firmware
- hp w1a31a firmware
- hp w1a32a firmware
- hp w1a33a firmware
- hp w1a34a firmware
- hp w1a35a firmware
- hp w1a38a firmware
- hp w1a46a firmware
- hp w1a47a firmware
- hp w1a48a firmware
- hp w1a51a firmware
- hp w1a52a firmware
- hp w1a53a firmware
- hp w1a56a firmware
- hp w1a57a firmware
- hp w1a58a firmware
- hp w1a59a firmware
- hp w1a60a firmware
- hp w1a63a firmware
- hp w1a66a firmware
- hp w1a75a firmware
- hp w1a76a firmware
- hp w1a77a firmware
- hp w1a78a firmware
- hp w1a79a firmware
- hp w1a80a firmware
- hp w1a81a firmware
- hp w1a82a firmware
- hp w1y40a firmware
- hp w1y41a firmware
- hp w1y43a firmware
- hp w1y44a firmware
- hp w1y45a firmware
- hp w1y46a firmware
- hp w1y47a firmware
- hp inc color laserjet mfp m478-m479 series
- hp inc color laserjet pro m453-m454 series
- hp inc laserjet pro m304-m305 printer series
- hp inc laserjet pro m404-m405 printer series
- hp inc laserjet pro mfp m428-m429 f series
- hp inc laserjet pro mfp m428-m429 series
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-12785 is a medium vulnerability (CVSS 6.9) in Hp 7kw48a Firmware, published November 13, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 25th percentile. No source names a fixed version.