CVE-2025-43018

Published: Jul 30, 2025Modified: Jun 17, 2026

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: hp-security-alert@hp.com (Secondary)

Description

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.

Affected (17)

Products: Hp: W1a75a Firmware, W1a76a Firmware, W1a77a Firmware, W1a81a Firmware, W1a82a Firmware, W1a79a Firmware, W1a80a Firmware, W1a78a Firmware, W1a29a Firmware, W1a32a Firmware, W1a30a Firmware, W1a38a Firmware, W1a34a Firmware, W1a35a Firmware, W1a28a Firmware, W1a31a Firmware, W1a33a Firmware

17 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a75a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a75a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a76a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a76a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a77a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a77a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a81a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a81a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a82a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a82a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a79a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a79a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a80a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a80a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a78a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a78a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a29a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a29a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a32a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a32a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a30a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a30a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a38a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a38a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a34a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a34a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a35a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a35a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a28a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a28a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a31a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a31a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp W1a33a Firmware	Before 002.2508a

Running on/with	Platform Versions
Hp W1a33a	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://support.hp.com/us-en/document/ish_12807011-12807034-16/hpsbpi04040

Source: hp-security-alert@hp.com

Vendor Advisory

Timeline

No history available yet.