Vulnerability-Lookup

BDU:2025-01862 (CVE-2025-26506)

Vulnerability from fstec – Published: 2025-02-20 – Updated: 2025-02-20 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения принтеров HP LaserJet Pro, связанная с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код и повысить свои привилегии

Summary

Уязвимость микропрограммного обеспечения принтеров HP LaserJet Pro связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код и повысить свои привилегии путем отправки данных в формате PostScript

Severity

7.6 (High) CVSS 2.0


                      
                        AV:N/AC:H/Au:N/C:C/I:C/A:C

8.1 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 (Critical) CVSS 4.0


                      
                        CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-121 - Переполнение буфера в стеке

Aliases

CVE-2025-26506, PSR-2024-0213, PSR-2024-0214

References

2 references

URL
https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007
https://vuldb.com/?id.295912

Impacted products

96 products from 1 vendor

Vendors

HP Inc.

Products

HP Color LaserJet Pro 4201-4203 Printer series (4RA85F, 4RA86F, 4RA87F, 5HH51A, 4RA88F, 5HH52A, 5HH53A, 4RA89A, 4RA89V, 5HH48A, 5HH48V, 5HH59A), HP Color LaserJet Pro 4201-4203dne/dwe HP+ Printer series (4RA85A, 4RA85E, 4RA85V, 4RA86A, 4RA86E, 4RA87A, 4RA87E, 4RA88A, 4RA88E), HP Color LaserJet Pro MFP 4301-4303 Printer series (4RA80F, 4RA81F, 4RA81FR, 4RA82F, 4RA82FR, 4RA83F, 4RA84F, 5HH72A, 5HH64F, 5HH73A, 5HH65A, 5HH66A, 5HH67A), HP Color LaserJet Pro MFP 4301-4303dwe/fdne/fdwe HP+ Printer Series (4RA80A, 4RA80E, 4RA81A, 4RA81E, 4RA82A, 4RA82E, 4RA83A, 4RA83E, 4RA84A, 4RA84E, 5HH64A, 5HH64E), HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (74T92A, 74T92F, 499Q4F, 499Q5A, 499Q5F, 499Q5FR, 499Q3A, 499Q3F, 499Q7A, 499Q7F, 759V1F, 499Q8A, 499Q8F), HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (759V2F, 499Q6A, 499Q6F, 759V0F, 499M7A, 499M8A, 499M6A, 499N0A, 499N1A, 499M9A, 74P27A, 74P28A, 74P26A), HP Color LaserJet Pro MFP 3301e-3304e Printer series (74T92E, 499Q4E, 499Q5E, 499Q3E, 499Q7E, 759V1E, 499Q8E, 759V2E, 499Q6E, 759V0E), HP Color LaserJet Pro 3201-3204, 3288 Printer Series (499Q9A, 499Q9F, 8D7L0A, 499R0A, 499R0F, 8D7L2A, 499N4A, 499N6A, 499N5A, 8D7L1A, 74P25A), HP Color LaserJet Pro 3201e-3204e Printer series (499Q9E, 499R0E)

Versions

до 6.17.5.34-202412122146 (HP Color LaserJet Pro 4201-4203 Printer series (4RA85F, 4RA86F, 4RA87F, 5HH51A, 4RA88F, 5HH52A, 5HH53A, 4RA89A, 4RA89V, 5HH48A, 5HH48V, 5HH59A)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro 4201-4203dne/dwe HP+ Printer series (4RA85A, 4RA85E, 4RA85V, 4RA86A, 4RA86E, 4RA87A, 4RA87E, 4RA88A, 4RA88E)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 4301-4303 Printer series (4RA80F, 4RA81F, 4RA81FR, 4RA82F, 4RA82FR, 4RA83F, 4RA84F, 5HH72A, 5HH64F, 5HH73A, 5HH65A, 5HH66A, 5HH67A)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 4301-4303dwe/fdne/fdwe HP+ Printer Series (4RA80A, 4RA80E, 4RA81A, 4RA81E, 4RA82A, 4RA82E, 4RA83A, 4RA83E, 4RA84A, 4RA84E, 5HH64A, 5HH64E)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (74T92A, 74T92F, 499Q4F, 499Q5A, 499Q5F, 499Q5FR, 499Q3A, 499Q3F, 499Q7A, 499Q7F, 759V1F, 499Q8A, 499Q8F)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (759V2F, 499Q6A, 499Q6F, 759V0F, 499M7A, 499M8A, 499M6A, 499N0A, 499N1A, 499M9A, 74P27A, 74P28A, 74P26A)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 3301e-3304e Printer series (74T92E, 499Q4E, 499Q5E, 499Q3E, 499Q7E, 759V1E, 499Q8E, 759V2E, 499Q6E, 759V0E)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro 3201-3204, 3288 Printer Series (499Q9A, 499Q9F, 8D7L0A, 499R0A, 499R0F, 8D7L2A, 499N4A, 499N6A, 499N5A, 8D7L1A, 74P25A)), до 6.17.5.34-202412122146 (HP Color LaserJet Pro 3201e-3204e Printer series (499Q9E, 499R0E))

Product types

Network appliance software, Firmware

Mitigations

Использование рекомендаций производителя: https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": "AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "HP Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro 4201-4203 Printer series (4RA85F, 4RA86F, 4RA87F, 5HH51A, 4RA88F, 5HH52A, 5HH53A, 4RA89A, 4RA89V, 5HH48A, 5HH48V, 5HH59A)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro 4201-4203dne/dwe HP+ Printer series (4RA85A, 4RA85E, 4RA85V, 4RA86A, 4RA86E, 4RA87A, 4RA87E, 4RA88A, 4RA88E)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 4301-4303 Printer series (4RA80F, 4RA81F, 4RA81FR, 4RA82F, 4RA82FR, 4RA83F, 4RA84F, 5HH72A, 5HH64F, 5HH73A, 5HH65A, 5HH66A, 5HH67A)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 4301-4303dwe/fdne/fdwe HP+ Printer Series (4RA80A, 4RA80E, 4RA81A, 4RA81E, 4RA82A, 4RA82E, 4RA83A, 4RA83E, 4RA84A, 4RA84E, 5HH64A, 5HH64E)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (74T92A, 74T92F, 499Q4F, 499Q5A, 499Q5F, 499Q5FR, 499Q3A, 499Q3F, 499Q7A, 499Q7F, 759V1F, 499Q8A, 499Q8F)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (759V2F, 499Q6A, 499Q6F, 759V0F, 499M7A, 499M8A, 499M6A, 499N0A, 499N1A, 499M9A, 74P27A, 74P28A, 74P26A)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro MFP 3301e-3304e Printer series (74T92E, 499Q4E, 499Q5E, 499Q3E, 499Q7E, 759V1E, 499Q8E, 759V2E, 499Q6E, 759V0E)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro 3201-3204, 3288 Printer Series (499Q9A, 499Q9F, 8D7L0A, 499R0A, 499R0F, 8D7L2A, 499N4A, 499N6A, 499N5A, 8D7L1A, 74P25A)), \u0434\u043e 6.17.5.34-202412122146 (HP Color LaserJet Pro 3201e-3204e Printer series (499Q9E, 499R0E))",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.02.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "20.02.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "20.02.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-01862",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-26506, PSR-2024-0213, PSR-2024-0214",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "HP Color LaserJet Pro 4201-4203 Printer series (4RA85F, 4RA86F, 4RA87F, 5HH51A, 4RA88F, 5HH52A, 5HH53A, 4RA89A, 4RA89V, 5HH48A, 5HH48V, 5HH59A), HP Color LaserJet Pro 4201-4203dne/dwe HP+ Printer series (4RA85A, 4RA85E, 4RA85V, 4RA86A, 4RA86E, 4RA87A, 4RA87E, 4RA88A, 4RA88E), HP Color LaserJet Pro MFP 4301-4303 Printer series (4RA80F, 4RA81F, 4RA81FR, 4RA82F, 4RA82FR, 4RA83F, 4RA84F, 5HH72A, 5HH64F, 5HH73A, 5HH65A, 5HH66A, 5HH67A), HP Color LaserJet Pro MFP 4301-4303dwe/fdne/fdwe HP+ Printer Series (4RA80A, 4RA80E, 4RA81A, 4RA81E, 4RA82A, 4RA82E, 4RA83A, 4RA83E, 4RA84A, 4RA84E, 5HH64A, 5HH64E), HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (74T92A, 74T92F, 499Q4F, 499Q5A, 499Q5F, 499Q5FR, 499Q3A, 499Q3F, 499Q7A, 499Q7F, 759V1F, 499Q8A, 499Q8F), HP Color LaserJet Pro MFP 3301-3304 3388 Printer Series (759V2F, 499Q6A, 499Q6F, 759V0F, 499M7A, 499M8A, 499M6A, 499N0A, 499N1A, 499M9A, 74P27A, 74P28A, 74P26A), HP Color LaserJet Pro MFP 3301e-3304e Printer series (74T92E, 499Q4E, 499Q5E, 499Q3E, 499Q7E, 759V1E, 499Q8E, 759V2E, 499Q6E, 759V0E), HP Color LaserJet Pro 3201-3204, 3288 Printer Series (499Q9A, 499Q9F, 8D7L0A, 499R0A, 499R0F, 8D7L2A, 499N4A, 499N6A, 499N5A, 8D7L1A, 74P25A), HP Color LaserJet Pro 3201e-3204e Printer series (499Q9E, 499R0E)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 HP LaserJet Pro, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 (CWE-121)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 HP LaserJet Pro \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 PostScript",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007\nhttps://vuldb.com/?id.295912",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-121",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,1)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,2)"
}

CVE-2025-26506 (GCVE-0-2025-26506)

Vulnerability from cvelistv5 – Published: 2025-02-14 16:58 – Updated: 2025-02-14 17:23

Title

Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege

Summary

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-14 17:13 UTC

CWE

CWE-121

Assigner

hp mitre root

References

1 reference

URL	Tags
https://support.hp.com/us-en/document/ish_1195377…

Impacted products

1 product

Vendor	Product	Version
HP, Inc.	Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers	Affected: See HP security bulletin reference for affected versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-26506",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-14T17:13:43.148071Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-14T17:23:15.086Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers",
          "vendor": "HP, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "See HP security bulletin reference for affected versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eCertain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.\u003c/span\u003e"
            }
          ],
          "value": "Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-14T16:58:09.823Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers \u2013 Potential Remote Code Execution and Potential Elevation of Privilege",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2025-26506",
    "datePublished": "2025-02-14T16:58:09.823Z",
    "dateReserved": "2025-02-11T20:23:19.623Z",
    "dateUpdated": "2025-02-14T17:23:15.086Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.