CVE-2023-26301

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-21 · updated 2026-06-17
Weakness: CWE-862

Description

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.

Affected products

HP Color Laserjet Pro 4201-4203 4Ra87F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro 4201-4203 4Ra88F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro 4201-4203 4Ra89A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro 4201-4203 5Hh48A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro 4201-4203 5Hh51A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro 4201-4203 5Hh52A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro 4201-4203 5Hh53A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro 4201-4203 5Hh59A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 4Ra80F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 4Ra81F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 4Ra82F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 4Ra83F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 4Ra84F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 5Hh64F Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 5Hh65A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 5Hh66A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 5Hh67A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 5Hh72A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312
HP Color Laserjet Pro Mfp 4301-4303 5Hh73A Firmware: before 6.12.1.12-202306030312 — fixed in 6.12.1.12-202306030312

How to fix

Upgrade to a fixed version: HP Color Laserjet Pro 4201-4203 4Ra87F Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro 4201-4203 4Ra88F Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro 4201-4203 4Ra89A Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro 4201-4203 5Hh48A Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro 4201-4203 5Hh51A Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro 4201-4203 5Hh52A Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro 4201-4203 5Hh53A Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro 4201-4203 5Hh59A Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro Mfp 4301-4303 4Ra80F Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro Mfp 4301-4303 4Ra81F Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro Mfp 4301-4303 4Ra82F Firmware 6.12.1.12-202306030312; HP Color Laserjet Pro Mfp 4301-4303 4Ra83F Firmware 6.12.1.12-202306030312. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-26301 or the next vulnerability affects your stack