CVE-2025-2268: HP LaserJet MFP M232-M237 Printer Series - Potential Denial of Service

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-14 · updated 2026-06-17
Weakness: CWE-241

Description

The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).

Affected products

HP 1Y7D4A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 2A129A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 2A130A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 2A130E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 2U589A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 2U589E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 2U589F Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gw71A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gw99A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gw99E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx00A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx00E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx01A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx02E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx03A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx04A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx05A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx05E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx06A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx09A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Gx09E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 6Hu08A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md69A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md70A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md70E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md70F Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md71A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md72A Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md72E Firmware: before 2025-03-24 — fixed in 2025-03-24
HP 7Md73A Firmware: before 2025-03-24 — fixed in 2025-03-24

How to fix

Upgrade to a fixed version: HP 1Y7D4A Firmware 2025-03-24; HP 2A129A Firmware 2025-03-24; HP 2A130A Firmware 2025-03-24; HP 2A130E Firmware 2025-03-24; HP 2U589A Firmware 2025-03-24; HP 2U589E Firmware 2025-03-24; HP 2U589F Firmware 2025-03-24; HP 6Gw71A Firmware 2025-03-24; HP 6Gw99A Firmware 2025-03-24; HP 6Gw99E Firmware 2025-03-24; HP 6Gx00A Firmware 2025-03-24; HP 6Gx00E Firmware 2025-03-24. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_12114154-12114176-16/hpsbpi04013

Get alerted when CVE-2025-2268 or the next vulnerability affects your stack