CVE-2023-26301

CRITICAL

HP LaserJet Pro - Privilege Escalation/Info Disclosure

Title source: llm

Description

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.

References (1)

Core 1

Core References

Vendor Advisory

https://support.hp.com/us-en/document/ish_8746769-8746795-16/hpsbpi03855

Scores

CVSS v3 9.8

EPSS 0.0093

EPSS Percentile 76.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-862

Status published

Products (19)

hp/color_laserjet_pro_4201-4203_4ra87f_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_4201-4203_4ra88f_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_4201-4203_4ra89a_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_4201-4203_5hh48a_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_4201-4203_5hh51a_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_4201-4203_5hh52a_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_4201-4203_5hh53a_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_4201-4203_5hh59a_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_mfp_4301-4303_4ra80f_firmware < 6.12.1.12-202306030312

hp/color_laserjet_pro_mfp_4301-4303_4ra81f_firmware < 6.12.1.12-202306030312

... and 9 more

Published Jul 21, 2023

Tracked Since Feb 18, 2026