Back to the CVE list
CVE-2025-12784

Information exposure in Hp W1y47a Firmware

CVSS score

4.9

EPSS probability

%0.3

Risk score

0.0

Published

11 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-12784 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-12784 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1hpw1y47a firmware View
2hpw1y47a View
3hp7kw48a firmware View
4hp7kw48a View
5hp7kw49a firmware View
6hp7kw49a View
7hp7kw50a firmware View
8hp7kw50a View
9hp7kw51a firmware View
10hp7kw51a View
11hp7kw54a firmware View
12hp7kw54a View
13hp7kw55a firmware View
14hp7kw55a View
15hp7kw56a firmware View
16hp7kw56a View
17hp7kw57a firmware View
18hp7kw57a View
19hp7kw58a firmware View
20hp7kw58a View
21hp7kw59a firmware View
22hp7kw59a View
23hp7kw63a firmware View
24hp7kw63a View
25hp7kw64a firmware View
26hp7kw64a View
27hp7kw65a firmware View
28hp7kw65a View
29hp7kw66a firmware View
30hp7kw66a View
31hp7kw67a firmware View
32hp7kw67a View
33hp7kw68a firmware View
34hp7kw68a View
35hp7kw72a firmware View
36hp7kw72a View
37hp7kw73a firmware View
38hp7kw73a View
39hp7kw74a firmware View
40hp7kw74a View
41hp7kw75a firmware View
42hp7kw75a View
43hp7kw76a firmware View
44hp7kw76a View
45hp7kw77a firmware View
46hp7kw77a View
47hp7kw78a firmware View
48hp7kw78a View
49hp7kw79a firmware View
50hp7kw79a View
51hp93m22a firmware View
52hp93m22a View
53hpw1a28a firmware View
54hpw1a28a View
55hpw1a29a firmware View
56hpw1a29a View
57hpw1a30a firmware View
58hpw1a30a View
59hpw1a31a firmware View
60hpw1a31a View
61hpw1a32a firmware View
62hpw1a32a View
63hpw1a33a firmware View
64hpw1a33a View
65hpw1a34a firmware View
66hpw1a34a View
67hpw1a35a firmware View
68hpw1a35a View
69hpw1a38a firmware View
70hpw1a38a View
71hpw1a46a firmware View
72hpw1a46a View
73hpw1a47a firmware View
74hpw1a47a View
75hpw1a48a firmware View
76hpw1a48a View
77hpw1a51a firmware View
78hpw1a51a View
79hpw1a52a firmware View
80hpw1a52a View
81hpw1a53a firmware View
82hpw1a53a View
83hpw1a56a firmware View
84hpw1a56a View
85hpw1a57a firmware View
86hpw1a57a View
87hpw1a58a firmware View
88hpw1a58a View
89hpw1a59a firmware View
90hpw1a59a View
91hpw1a60a firmware View
92hpw1a60a View
93hpw1a63a firmware View
94hpw1a63a View
95hpw1a66a firmware View
96hpw1a66a View
97hpw1a75a firmware View
98hpw1a75a View
99hpw1a76a firmware View
100hpw1a76a View
101hpw1a77a firmware View
102hpw1a77a View
103hpw1a78a firmware View
104hpw1a78a View
105hpw1a79a firmware View
106hpw1a79a View
107hpw1a80a firmware View
108hpw1a80a View
109hpw1a81a firmware View
110hpw1a81a View
111hpw1a82a firmware View
112hpw1a82a View
113hpw1y40a firmware View
114hpw1y40a View
115hpw1y41a firmware View
116hpw1y41a View
117hpw1y43a firmware View
118hpw1y43a View
119hpw1y44a firmware View
120hpw1y44a View
121hpw1y45a firmware View
122hpw1y45a View
123hpw1y46a firmware View
124hpw1y46a View
Total affected vendors: 1|Products: 124

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.9CVSS V40MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD
4.9CVSS V31MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-12784 is associated with the following CWEs:

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-12784 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://support.hp.com/us-en/document/ish_13229161-13229183-16/hpsbpi04074vendor-advisory

CVSS Vector Radar Chart

4.9 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

H
hp logo
hp

Weakness Type (CWE & CAPEC)

CWE-200

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-12784"
CVE-2025-12784 · Information exposure in Hp W1y47a Firmware