{"id":"CVE-2023-26301","aliases":["EUVD-2023-30124","GHSA-225m-c7c9-rg4x"],"status":"published","title":"Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege...","description":"Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00827,"percentile":0.57886,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2023-07-21T16:06:27Z","modified":"2026-06-17T05:43:01Z","products":[{"vendor":"hp","product":"color_laserjet_pro_4201-4203_4ra87f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_4201-4203_4ra88f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_4201-4203_4ra89a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_4201-4203_5hh48a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_4201-4203_5hh51a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_4201-4203_5hh52a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_4201-4203_5hh53a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_4201-4203_5hh59a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_4ra80f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_4ra81f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_4ra82f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_4ra83f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_4ra84f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_5hh64f_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_5hh65a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_5hh66a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_5hh67a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_5hh72a_firmware"},{"vendor":"hp","product":"color_laserjet_pro_mfp_4301-4303_5hh73a_firmware"},{"vendor":"hp","product":"hp laserjet pro"},{"vendor":"hp inc.","product":"hp laserjet pro"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_8746769-8746795-16/hpsbpi03855","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26301"},{"url":"https://github.com/advisories/GHSA-225m-c7c9-rg4x"}],"sources":{"cve":[{"id":"CVE-2023-26301","description":"Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.","status":"published","published":"2023-07-21T16:06:27.054Z","modified":"2024-08-02T11:46:23.942Z","updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-30124","description":"Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.","status":"published","published":"2023-07-21T16:06:27Z","modified":"2024-08-02T11:46:23Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"none"}],"updated_at":"2026-11-03T03:50:06.766939Z"}],"ghsa":[{"id":"GHSA-225m-c7c9-rg4x","title":"Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege...","description":"Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.","status":"published","published":"2023-07-21T18:30:37Z","modified":"2024-04-04T06:18:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:56:40.949889Z"}],"nvd":[{"id":"CVE-2023-26301","description":"Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.","status":"published","published":"2023-07-21T17:15:10.09Z","modified":"2026-06-17T05:43:01.477Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:08:17.044696Z"}]}}