Unscored severity · published Dec 6, 2012
CVE-2012-3272
Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3 18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Color Laserjet Cm3530 · HP
through 53.190.8 · source: NVD
CL
Color Laserjet Cm60xx · HP
through 53.190.8 · source: NVD
CL
Color Laserjet Cp3525 · HP
through 06.140.3.17 · source: NVD
CL
Color Laserjet Cp4xxx · HP
through 07.120.5 · source: NVD
CL
Color Laserjet Cp6015 · HP
through 04.160.2 · source: NVD
LP
Laserjet P3015 · HP
through 07.140.2 · source: NVD
LP
Laserjet P4xxx · HP
through 04.170.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3272
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3272
www.securitytracker.com
http://www.securitytracker.com/id?1027841
Vendor Advisory
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03556108
More from Color Laserjet Cm3530
–
CVE-2011-4161
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c;…