CVE-2025-12784: Certain HP LaserJet Pro Printers – Potential Information Disclosure

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-13 · updated 2026-10-18
Weakness: CWE-200

Description

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

Affected products

HP 7Kw48A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw49A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw50A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw51A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw54A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw55A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw56A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw57A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw58A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw59A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw63A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw64A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw65A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw66A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw67A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw68A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw72A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw73A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw74A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw75A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw76A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw77A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw78A Firmware: before 002.2539e — fixed in 002.2539e
HP 7Kw79A Firmware: before 002.2539e — fixed in 002.2539e
HP 93M22A Firmware: before 002.2539e — fixed in 002.2539e
HP W1A28A Firmware: before 002.2539e — fixed in 002.2539e
HP W1A29A Firmware: before 002.2539e — fixed in 002.2539e
HP W1A30A Firmware: before 002.2539e — fixed in 002.2539e
HP W1A31A Firmware: before 002.2539e — fixed in 002.2539e
HP W1A32A Firmware: before 002.2539e — fixed in 002.2539e

How to fix

Upgrade to a fixed version: HP 7Kw48A Firmware 002.2539e; HP 7Kw49A Firmware 002.2539e; HP 7Kw50A Firmware 002.2539e; HP 7Kw51A Firmware 002.2539e; HP 7Kw54A Firmware 002.2539e; HP 7Kw55A Firmware 002.2539e; HP 7Kw56A Firmware 002.2539e; HP 7Kw57A Firmware 002.2539e; HP 7Kw58A Firmware 002.2539e; HP 7Kw59A Firmware 002.2539e; HP 7Kw63A Firmware 002.2539e; HP 7Kw64A Firmware 002.2539e. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_13229161-13229183-16/hpsbpi04074

Get alerted when CVE-2025-12784 or the next vulnerability affects your stack