CVE-2025-43018
6.9 mediumEPSS 0.3%
Medium (6.9) in hp. EPSS 0.3% chance of exploitation in the next 30 days.
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.
Severity
CVSS 4.0
6.9 mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NCVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:w1a28a_firmware
- hp:w1a29a_firmware
- hp:w1a30a_firmware
- hp:w1a31a_firmware
- hp:w1a32a_firmware
- hp:w1a33a_firmware
- hp:w1a34a_firmware
- hp:w1a35a_firmware
- hp:w1a38a_firmware
- hp:w1a75a_firmware
- hp:w1a76a_firmware
- hp:w1a77a_firmware
- hp:w1a78a_firmware
- hp:w1a79a_firmware
- hp:w1a80a_firmware
- hp:w1a81a_firmware
- hp:w1a82a_firmware
References
Check your stackJSON