VulnerabilityModified

CVE-2012-5215

HIGH 8.8EPSS 2.48%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.48%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability on the HP LaserJet Pro M1212nf, M1213nf, M1214nfh, M1216nfh, M1217nfw, and M1219nf, and HotSpot LaserJet Pro M1218nfs, with firmware before 20130211; LaserJet Pro CP1025nw with firmware before 20130212; and LaserJet Pro P1102w and P1606dn with firmware before 20130213 allows remote attackers to modify data or cause a denial of service via unknown vectors.

CVSS 2.0: 8.8 HIGHAV:N/AC:M/Au:N/C:N/I:C/A:C
EPSS: 2.48% probability · 84th percentile
CISA KEV: Not listed
Affected: hp/hotspot laserjet pro m1218nfs mfp · hp/laserjet pro m1212nf mfp · hp/laserjet pro m1213nf mfp · hp/laserjet pro m1214nfh mfp · hp/laserjet pro m1216nfh multifunction printer · hp/laserjet pro m1217nfw multifunction printer · hp/laserjet pro m1219nf mfp · hp/hotspot laserjet pro m1218nfs mfp firmware · hp/laserjet pro m1212nf mfp firmware · hp/laserjet pro m1213nf mfp firmware · hp/laserjet pro m1214nfh mfp firmware · hp/laserjet pro m1216nfh multifunction printer firmware · hp/laserjet pro m1217nfw multifunction printer firmware · hp/laserjet pro m1219nf mfp firmware · hp/laserjet pro cp1025nw · hp/laserjet pro cp1025nw firmware · hp/laserjet pro p1102w · hp/laserjet pro p1606dn · hp/laserjet pro p1102w firmware · hp/laserjet pro p1606dn firmware
Source: hp-security-alert@hp.com

References

http://www.kb.cert.org/vuls/id/782451US Government Resource
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03684249Vendor Advisory
http://www.kb.cert.org/vuls/id/782451US Government Resource
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03684249Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.