Information Disclosure in HP LaserJet Pro Printers
CVE-2025-12784

6.9MEDIUM

Key Information:

Vendor

HP Inc

Status
HP Color Laserjet Mfp M478-m479 Series
HP Color Laserjet Pro M453-m454 Series
HP Laserjet Pro M304-m305 Printer Series
HP Laserjet Pro M404-m405 Printer Series
Vendor
CVE Published:
13 November 2025

What is CVE-2025-12784?

Certain models of HP LaserJet Pro printers are susceptible to a vulnerability where unauthorized disclosure of sensitive information may occur. This issue arises when an attacker modifies the scan/send destination address or alters the LDAP server configuration, potentially leading to the exposure of credentials. It is crucial for users to assess their printer settings and ensure security measures are in place to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HP Color LaserJet MFP M478-M479 series 0 < 002_2539E

HP Color LaserJet Pro M453-M454 series 0 < 002_2539E

HP LaserJet Pro M304-M305 Printer series 0 < 002_2539E

References

https://support.hp.com/us-en/document/ish_13229161-132291...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.