CVE-2025-12784

—

CVSS 4.0

6.9 medium

EPSS

<1%p23

Published

Nov 13, 2025 (Nov 13, 2025)

Modified

Jun 17, 2026

Description

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

Vendors: hp
Products: w1y47a firmware, 7kw48a firmware, 7kw49a firmware, 7kw50a firmware, 7kw51a firmware, 7kw54a firmware, 7kw55a firmware, 7kw56a firmware, 7kw57a firmware, 7kw58a firmware, 7kw59a firmware, 7kw63a firmware
Weakness: CWE-200
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.