Information Disclosure Vulnerability in HP DesignJet Printers
CVE-2025-3508

6MEDIUM

Key Information:

Vendor

HP
Status
Certain HP Designjet Products
Vendor
CVE Published:
25 July 2025

What is CVE-2025-3508?

Certain HP DesignJet printers have a vulnerability in their web interface that allows unauthenticated users to access sensitive information relating to print jobs. This flaw poses a significant risk, as it enables unauthorized individuals to view confidential documents that have been printed, potentially exposing sensitive data without proper authentication measures.

Affected Version(s)

Certain HP DesignJet products See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_12798086-127981...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-3508 : Information Disclosure Vulnerability in HP DesignJet Printers