Medium severity · published Jul 25, 2025
CVE-2025-3508
Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauthenticated users to view sensitive print job information
6.5
CVSS
1.1%
EPSS
No
On KEV
Description
Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauthenticated users to view sensitive print job information.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1F
1vd83a Firmware · HP
before jgrp_09_25_22.1 · source: NVD
1F
1vd84a Firmware · HP
before jgrp_09_25_22.1 · source: NVD
1F
1vd85a Firmware · HP
before jgrp_09_25_22.1 · source: NVD
1F
1vd86a Firmware · HP
before jgrp_09_25_22.1 · source: NVD
1F
1vd87a Firmware · HP
before jgrw_09_25_22.1 · source: NVD
1F
1vd87f Firmware · HP
before jgrw_09_25_22.1 · source: NVD
1F
1vd88a Firmware · HP
before jgrw_09_25_22.1 · source: NVD
1F
1vd88b Firmware · HP
before jgrw_09_25_22.1 · source: NVD
1F
1vd88f Firmware · HP
before jgrw_09_25_22.1 · source: NVD
TF
T8w15a Firmware · HP
before jgr6_09_25_22.1 · source: NVD
TF
T8w15b Firmware · HP
before jgr6_09_25_22.1 · source: NVD
TF
T8w15c Firmware · HP
before jgr6_09_25_22.1 · source: NVD