PT-2025-7171 · Hewlett Packard · Hp Laserjet Enterprise+2

Published 2025-02-14 · Updated 2025-03-14 · CVE-2025-26506

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers (affected versions not specified)

Description The issue concerns Remote Code Execution and Elevation of Privilege when processing a PostScript print job. It is estimated that over 71,900 services and 112,000 results are potentially affected. The vulnerability stems from how the printers process PostScript print jobs, allowing an attacker to exploit these flaws by sending a specially crafted print job to a vulnerable printer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-01862

CVE-2025-26506

ZDI-25-107

Affected Products

Hp Laserjet Enterprise

Hp Laserjet Managed

Hp Laserjet Pro

References · 23

• https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-107 · Security Note
• https://bdu.fstec.ru/vul/2025-01862 · Security Note
• https://osv.dev/vulnerability/CVE-2025-26506 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26506 · Security Note
• https://twitter.com/the_yellow_fall/status/1892390338116915535 · Twitter Post
• https://twitter.com/zoomeye_team/status/1892417024053448859 · Twitter Post
• https://t.me/cvedetector/18118 · Telegram Post
• https://twitter.com/syedaquib77/status/1896566975872258201 · Twitter Post
• https://twitter.com/Dinosn/status/1892439274395488383 · Twitter Post
• https://twitter.com/CveFindCom/status/1890446302011335052 · Twitter Post
• https://t.me/pentestingnews/56810 · Telegram Post
• https://t.me/secharvester/18481 · Telegram Post
• https://twitter.com/fofabot/status/1892408834792313190 · Twitter Post
• https://twitter.com/HunterMapping/status/1892775655948873909 · Twitter Post