Certain HP LaserJet Pro Printers – Potential Information Disclosure

2024-05-2300:00:00

HP Product Security Response Team

support.hp.com

laserjet

printers

information disclosure

printer firmware

information security

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.

Update your printer firmware.