Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-26301: Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.

CVE-2023-26301 · published 3 years ago

Summary

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.

What to do

Update hp color_laserjet_pro_4201-4203_4ra87f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_4201-4203_4ra88f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_4201-4203_4ra89a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_4201-4203_5hh48a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_4201-4203_5hh51a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_4201-4203_5hh52a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_4201-4203_5hh53a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_4201-4203_5hh59a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_4ra80f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_4ra81f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_4ra82f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_4ra83f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_4ra84f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_5hh64f_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_5hh65a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_5hh66a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_5hh67a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_5hh72a_firmware to version 6.12.1.12-202306030312 or later.
Update hp color_laserjet_pro_mfp_4301-4303_5hh73a_firmware to version 6.12.1.12-202306030312 or later.

Affected software

Original advisory text

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.

References

https://support.hp.com/us-en/document/ish_8746769-8746795-16/hpsbpi03855 Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-862Missing Authorization

Timeline

Published21 Jul 2023

Updated31 Oct 2026

First seen29 Sep 2026

Sources

CVE-2023-26301 · NVD

Track software like this

Free during beta

Vendor	Product	Affected versions
hp	color_laserjet_pro_4201-4203_4ra87f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_4ra87f_firmware::::::::`
hp	color_laserjet_pro_4201-4203_4ra88f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_4ra88f_firmware::::::::`
hp	color_laserjet_pro_4201-4203_4ra89a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_4ra89a_firmware::::::::`
hp	color_laserjet_pro_4201-4203_5hh48a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_5hh48a_firmware::::::::`
hp	color_laserjet_pro_4201-4203_5hh51a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_5hh51a_firmware::::::::`
hp	color_laserjet_pro_4201-4203_5hh52a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_5hh52a_firmware::::::::`
hp	color_laserjet_pro_4201-4203_5hh53a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_5hh53a_firmware::::::::`
hp	color_laserjet_pro_4201-4203_5hh59a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_4201-4203_5hh59a_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_4ra80f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_4ra80f_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_4ra81f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_4ra81f_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_4ra82f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_4ra82f_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_4ra83f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_4ra83f_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_4ra84f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_4ra84f_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_5hh64f_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_5hh64f_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_5hh65a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_5hh65a_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_5hh66a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_5hh66a_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_5hh67a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_5hh67a_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_5hh72a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_5hh72a_firmware::::::::`
hp	color_laserjet_pro_mfp_4301-4303_5hh73a_firmware	< 6.12.1.12-202306030312 `cpe:2.3:o:hp:color_laserjet_pro_mfp_4301-4303_5hh73a_firmware::::::::`