What’s Vulnerable › Vulnerabilities
CVE-2012-5221
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 5.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2013-04-29 · updated 2026-06-16
Description
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
Affected products
- HP Color Laserjet 3000: q7534a
- HP Color Laserjet 3800: q5981a
- HP Color Laserjet 4700: q7492a
- HP Color Laserjet 4730 Mfp: cb480a
- HP Color Laserjet 5550: q3714a
- HP Color Laserjet 9500 Mfp: c8549a
- HP Color Laserjet Cm6030 Mfp: ce664a
- HP Color Laserjet Cm6040 Mfp: q3939a
- HP Color Laserjet Cp3505: cb442a
- HP Color Laserjet Cp3525: cc469a
- HP Color Laserjet Cp4005: cb503a
- HP Color Laserjet Cp6015: q3932a
- HP Color Laserjet Enterprise Cp4025: cc490a
- HP Color Laserjet Enterprise Cp4525: cc493a
- HP Digital Sender 9250C: cb472a
- HP Laserjet 4240: q7785a
- HP Laserjet 4250: q5400a
- HP Laserjet 4345 Mfp: q3942a
- HP Laserjet 4350: q5407a
- HP Laserjet 5200L: q7543a
- HP Laserjet 5200N: q7543a
- HP Laserjet 9040: q7697a
- HP Laserjet 9040 Mfp: q3721a
- HP Laserjet 9050: q7697a
- HP Laserjet 9050 Mfp: q3721a
- HP Laserjet Enterprise P3015: ce526a
- HP Laserjet M3027 Mfp: cb416a
- HP Laserjet M3035 Mfp: cb414a, cc519a
- HP Laserjet M4345 Mfp: cb425a
- HP Laserjet M5025 Mfp: q7840a
References
- http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742
- http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742
Get alerted when CVE-2012-5221 or the next vulnerability affects your stack