CVE-2025-2268
HP LaserJet MFP M232-M237 Printer Series - Potential Denial of Service
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
HP LaserJet MFP M232-M237 Printer Series - Potential Denial of Service
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
- Record
CVE-2025-2268- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-241
- Updated
- 2026-11-02
EUVDEUVD-2025-6444
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
- Record
EUVD-2025-6444- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gfwp-pr8h-rv7g
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when...
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
- Record
GHSA-gfwp-pr8h-rv7g- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-241
- Updated
- 2026-11-02
NVD
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
- Record
CVE-2025-2268- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-241
- Updated
- 2026-11-02
Affected products
- hp laserjet mfp m232-m237 printer series
- hp 1y7d4a firmware
- hp 2a129a firmware
- hp 2a130a firmware
- hp 2a130e firmware
- hp 2u589a firmware
- hp 2u589e firmware
- hp 2u589f firmware
- hp 6gw71a firmware
- hp 6gw99a firmware
- hp 6gw99e firmware
- hp 6gx00a firmware
Show 44 moreShow less
- hp 6gx00e firmware
- hp 6gx01a firmware
- hp 6gx02e firmware
- hp 6gx03a firmware
- hp 6gx04a firmware
- hp 6gx05a firmware
- hp 6gx05e firmware
- hp 6gx06a firmware
- hp 6gx09a firmware
- hp 6gx09e firmware
- hp 6hu08a firmware
- hp 7md69a firmware
- hp 7md70a firmware
- hp 7md70e firmware
- hp 7md70f firmware
- hp 7md71a firmware
- hp 7md72a firmware
- hp 7md72e firmware
- hp 7md73a firmware
- hp 7md74a firmware
- hp 7md74e firmware
- hp 7md75a firmware
- hp 7md76a firmware
- hp 7md76e firmware
- hp 9yf88a firmware
- hp 9yf89a firmware
- hp 9yf90a firmware
- hp 9yf91a firmware
- hp 9yf91e firmware
- hp 9yf92a firmware
- hp 9yf94a firmware
- hp 9yf95a firmware
- hp 9yf96a firmware
- hp 9yf97a firmware
- hp 9yf98a firmware
- hp 9yg02a firmware
- hp 9yg02e firmware
- hp 9yg05a firmware
- hp 9yg05e firmware
- hp 9yg08a firmware
- hp 9yg09a firmware
- hp 9yg10a firmware
- hp 9yg11a firmware
- hp inc. laserjet mfp m232-m237 printer series
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-2268 is a medium vulnerability (CVSS 6.9) in Hp Laserjet Mfp M232-m237 Printer Series, published March 14, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. No source names a fixed version.