Critical severity · published Feb 14, 2025
CVE-2025-26506
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVSS
1.1%
EPSS
No
On KEV
Description
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
4F
499m6a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499m7a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499q9e Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499q9f Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499r0a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499r0e Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499r0f Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
4ra80a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
4ra80e Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
4ra80f Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
4ra81a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
4ra81e Firmware · HP
before 6.17.5.34-202412122146 · source: NVD