CVE-2012-5221
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx,...
CVE-2012-5221 is a medium vulnerability (CVSS 5.0) in Hp Laserjet Enterprise P3015, published April 29, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.04%, the 92nd percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 5.04%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
Exploit likelihood
Affected products
- hp laserjet enterprise p3015
- hp color laserjet 3000
- hp color laserjet 3800
- hp color laserjet 4700
- hp color laserjet 4730 mfp
- hp color laserjet 5550
- hp color laserjet 9500 mfp
- hp color laserjet cm6030 mfp
- hp color laserjet cm6040 mfp
- hp color laserjet cp3505
- hp color laserjet cp3525
- hp color laserjet cp4005
Show 25 moreShow less
- hp color laserjet cp6015
- hp color laserjet enterprise cp4025
- hp color laserjet enterprise cp4525
- hp digital sender 9250c
- hp laserjet 4240
- hp laserjet 4250
- hp laserjet 4345 mfp
- hp laserjet 4350
- hp laserjet 5200l
- hp laserjet 5200n
- hp laserjet 9040
- hp laserjet 9040 mfp
- hp laserjet 9050
- hp laserjet 9050 mfp
- hp laserjet m3027 mfp
- hp laserjet m3035 mfp
- hp laserjet m4345 mfp
- hp laserjet m5025 mfp
- hp laserjet m5035 mfp
- hp laserjet m9040 mpf
- hp laserjet m9050 mpf
- hp laserjet p3005
- hp laserjet p4014
- hp laserjet p4015
- hp laserjet p4515
What each source reports
NVD Score used
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
- Record
CVE-2012-5221- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
- Record
CVE-2012-5221- Updated
- 2026-11-02
EUVDEUVD-2012-5144No score
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
- Record
EUVD-2012-5144- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pfmf-q62w-88j9No score
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx,...
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
- Record
GHSA-pfmf-q62w-88j9- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742
verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
nvd.nist.gov/vuln/detail/CVE-2012-5221
github.com/advisories/GHSA-pfmf-q62w-88j9