CVE-2025-3508: Certain HP DesignJet products – Information disclosure

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-25 · updated 2026-06-17
Weakness: CWE-200

Description

Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauthenticated users to view sensitive print job information.

Affected products

HP 1Vd83A Firmware: before jgrp_09_25_22.1 — fixed in jgrp_09_25_22.1
HP 1Vd84A Firmware: before jgrp_09_25_22.1 — fixed in jgrp_09_25_22.1
HP 1Vd85A Firmware: before jgrp_09_25_22.1 — fixed in jgrp_09_25_22.1
HP 1Vd86A Firmware: before jgrp_09_25_22.1 — fixed in jgrp_09_25_22.1
HP 1Vd87A Firmware: before jgrw_09_25_22.1 — fixed in jgrw_09_25_22.1
HP 1Vd87F Firmware: before jgrw_09_25_22.1 — fixed in jgrw_09_25_22.1
HP 1Vd88A Firmware: before jgrw_09_25_22.1 — fixed in jgrw_09_25_22.1
HP 1Vd88B Firmware: before jgrw_09_25_22.1 — fixed in jgrw_09_25_22.1
HP 1Vd88F Firmware: before jgrw_09_25_22.1 — fixed in jgrw_09_25_22.1
HP T8W15A Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W15B Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W15C Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W15D Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W15E Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W15F Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W15G Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W15H Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16A Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16B Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16C Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16D Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16E Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16F Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16G Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W16H Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W18A Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W18B Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W18C Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W18D Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1
HP T8W18E Firmware: before jgr6_09_25_22.1 — fixed in jgr6_09_25_22.1

How to fix

Upgrade to a fixed version: HP 1Vd83A Firmware jgrp_09_25_22.1; HP 1Vd84A Firmware jgrp_09_25_22.1; HP 1Vd85A Firmware jgrp_09_25_22.1; HP 1Vd86A Firmware jgrp_09_25_22.1; HP 1Vd87A Firmware jgrw_09_25_22.1; HP 1Vd87F Firmware jgrw_09_25_22.1; HP 1Vd88A Firmware jgrw_09_25_22.1; HP 1Vd88B Firmware jgrw_09_25_22.1; HP 1Vd88F Firmware jgrw_09_25_22.1; HP T8W15A Firmware jgr6_09_25_22.1; HP T8W15B Firmware jgr6_09_25_22.1; HP T8W15C Firmware jgr6_09_25_22.1. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_12798086-12798125-16/hpsbpi04039

Get alerted when CVE-2025-3508 or the next vulnerability affects your stack