{"id":"CVE-2025-12784","aliases":["EUVD-2025-175348","GHSA-2886-9536-rhhj"],"status":"published","title":"Certain HP LaserJet Pro Printers – Potential Information Disclosure","description":"Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00324,"percentile":0.25636,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2025-11-13T17:35:09Z","modified":"2026-10-18T20:10:00Z","products":[{"vendor":"hp","product":"7kw48a_firmware"},{"vendor":"hp","product":"7kw49a_firmware"},{"vendor":"hp","product":"7kw50a_firmware"},{"vendor":"hp","product":"7kw51a_firmware"},{"vendor":"hp","product":"7kw54a_firmware"},{"vendor":"hp","product":"7kw55a_firmware"},{"vendor":"hp","product":"7kw56a_firmware"},{"vendor":"hp","product":"7kw57a_firmware"},{"vendor":"hp","product":"7kw58a_firmware"},{"vendor":"hp","product":"7kw59a_firmware"},{"vendor":"hp","product":"7kw63a_firmware"},{"vendor":"hp","product":"7kw64a_firmware"},{"vendor":"hp","product":"7kw65a_firmware"},{"vendor":"hp","product":"7kw66a_firmware"},{"vendor":"hp","product":"7kw67a_firmware"},{"vendor":"hp","product":"7kw68a_firmware"},{"vendor":"hp","product":"7kw72a_firmware"},{"vendor":"hp","product":"7kw73a_firmware"},{"vendor":"hp","product":"7kw74a_firmware"},{"vendor":"hp","product":"7kw75a_firmware"},{"vendor":"hp","product":"7kw76a_firmware"},{"vendor":"hp","product":"7kw77a_firmware"},{"vendor":"hp","product":"7kw78a_firmware"},{"vendor":"hp","product":"7kw79a_firmware"},{"vendor":"hp","product":"93m22a_firmware"},{"vendor":"hp","product":"w1a28a_firmware"},{"vendor":"hp","product":"w1a29a_firmware"},{"vendor":"hp","product":"w1a30a_firmware"},{"vendor":"hp","product":"w1a31a_firmware"},{"vendor":"hp","product":"w1a32a_firmware"},{"vendor":"hp","product":"w1a33a_firmware"},{"vendor":"hp","product":"w1a34a_firmware"},{"vendor":"hp","product":"w1a35a_firmware"},{"vendor":"hp","product":"w1a38a_firmware"},{"vendor":"hp","product":"w1a46a_firmware"},{"vendor":"hp","product":"w1a47a_firmware"},{"vendor":"hp","product":"w1a48a_firmware"},{"vendor":"hp","product":"w1a51a_firmware"},{"vendor":"hp","product":"w1a52a_firmware"},{"vendor":"hp","product":"w1a53a_firmware"},{"vendor":"hp","product":"w1a56a_firmware"},{"vendor":"hp","product":"w1a57a_firmware"},{"vendor":"hp","product":"w1a58a_firmware"},{"vendor":"hp","product":"w1a59a_firmware"},{"vendor":"hp","product":"w1a60a_firmware"},{"vendor":"hp","product":"w1a63a_firmware"},{"vendor":"hp","product":"w1a66a_firmware"},{"vendor":"hp","product":"w1a75a_firmware"},{"vendor":"hp","product":"w1a76a_firmware"},{"vendor":"hp","product":"w1a77a_firmware"},{"vendor":"hp","product":"w1a78a_firmware"},{"vendor":"hp","product":"w1a79a_firmware"},{"vendor":"hp","product":"w1a80a_firmware"},{"vendor":"hp","product":"w1a81a_firmware"},{"vendor":"hp","product":"w1a82a_firmware"},{"vendor":"hp","product":"w1y40a_firmware"},{"vendor":"hp","product":"w1y41a_firmware"},{"vendor":"hp","product":"w1y43a_firmware"},{"vendor":"hp","product":"w1y44a_firmware"},{"vendor":"hp","product":"w1y45a_firmware"},{"vendor":"hp","product":"w1y46a_firmware"},{"vendor":"hp","product":"w1y47a_firmware"},{"vendor":"hp inc","product":"hp color laserjet mfp m478-m479 series"},{"vendor":"hp inc","product":"hp color laserjet pro m453-m454 series"},{"vendor":"hp inc","product":"hp laserjet pro m304-m305 printer series"},{"vendor":"hp inc","product":"hp laserjet pro m404-m405 printer series"},{"vendor":"hp inc","product":"hp laserjet pro mfp m428-m429 f series"},{"vendor":"hp inc","product":"hp laserjet pro mfp m428-m429 series"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_13229161-13229183-16/hpsbpi04074","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12784"},{"url":"https://github.com/advisories/GHSA-2886-9536-rhhj"}],"sources":{"cve":[{"id":"CVE-2025-12784","title":"Certain HP LaserJet Pro Printers – Potential Information Disclosure","description":"Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.","status":"published","published":"2025-11-13T17:35:09.424Z","modified":"2025-11-13T18:03:11.167Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:32:41.743125Z"}],"euvd":[{"id":"EUVD-2025-175348","description":"Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.","status":"published","published":"2025-11-13T17:35:09Z","modified":"2025-11-13T18:03:11Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:49:17.485718Z"}],"ghsa":[{"id":"GHSA-2886-9536-rhhj","title":"Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to...","description":"Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.","status":"published","published":"2025-11-13T18:31:05Z","modified":"2026-02-13T18:31:22Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:06:11.78432Z"}],"nvd":[{"id":"CVE-2025-12784","description":"Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.","status":"published","published":"2025-11-13T18:15:49.76Z","modified":"2026-10-18T20:10:00.11Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:11:43.650381Z"}]}}