CVE-2025-43018

🗓️ 30 Jul 2025 14:31:18Reported by hpType

HP LaserJet Pro printers may disclose information to non-authenticated users accessing local address book

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of microprogrammed software in HP Color LaserJet MFP multifunctional printers, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.	4 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-43018	30 Jul 202514:45	–	circl
CNNVD	HP LaserJet Pro 安全漏洞	30 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-43018 Certain HP LaserJet Pro Printers – Potential Information Disclosure	30 Jul 202514:31	–	cvelist
EUVD	EUVD-2025-23168	3 Oct 202520:07	–	euvd
Hewlett-Packard	Certain HP LaserJet Pro Printers – Potential Information Disclosure	30 Jul 202500:00	–	hp
Tenable Nessus	HP LaserJet Pro Printers Information Disclosure (HPSBPI04040)	8 Aug 202500:00	–	nessus
NVD	CVE-2025-43018	30 Jul 202515:15	–	nvd
OpenVAS	HP Color LaserJet MFP M478-M479 / LaserJet Pro MFP M428-M429 Printers Information Disclosure Vulnerability (HPSBPI04040)	1 Aug 202500:00	–	openvas
Positive Technologies	PT-2025-31392 · Hewlett Packard · Hp Laserjet Pro	30 Jul 202500:00	–	ptsecurity

NVD

Node

hp w1a75a_firmwareRange<002.2508a

AND

hp w1a75aMatch-

Node

hp w1a76a_firmwareRange<002.2508a

AND

hp w1a76aMatch-

Node

hp w1a77a_firmwareRange<002.2508a

AND

hp w1a77aMatch-

Node

hp w1a81a_firmwareRange<002.2508a

AND

hp w1a81aMatch-

Node

hp w1a82a_firmwareRange<002.2508a

AND

hp w1a82aMatch-

Node

hp w1a79a_firmwareRange<002.2508a

AND

hp w1a79aMatch-

Node

hp w1a80a_firmwareRange<002.2508a

AND

hp w1a80aMatch-

Node

hp w1a78a_firmwareRange<002.2508a

AND

hp w1a78aMatch-

Node

hp w1a29a_firmwareRange<002.2508a

AND

hp w1a29aMatch-

Node

hp w1a32a_firmwareRange<002.2508a

AND

hp w1a32aMatch-

Node

hp w1a30a_firmwareRange<002.2508a

AND

hp w1a30aMatch-

Node

hp w1a38a_firmwareRange<002.2508a

AND

hp w1a38aMatch-

Node

hp w1a34a_firmwareRange<002.2508a

AND

hp w1a34aMatch-

Node

hp w1a35a_firmwareRange<002.2508a

AND

hp w1a35aMatch-

Node

hp w1a28a_firmwareRange<002.2508a

AND

hp w1a28aMatch-

Node

hp w1a31a_firmwareRange<002.2508a

AND

hp w1a31aMatch-

Node

hp w1a33a_firmwareRange<002.2508a

AND

hp w1a33aMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Certain HP LaserJet Pro Printers",
    "vendor": "HP, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "See HP security bulletin reference for affected versions"
      }
    ]
  }
]

Source	Link
support	www.support.hp.com/us-en/document/ish_12807011-12807034-16/hpsbpi04040

24 Feb 2026 14:37Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

CVSS 46.9

EPSS0.00208

SSVC

CWE-200