CVE-2023-1526: HP Designjet z6 Firmware

Medium severity, CVSS 4.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer.

Affected products

• HP Designjet z6 Firmware: before jgr6_09_22_51.2 (fixed in jgr6_09_22_51.2)
• HP Designjet z6dr Firmware: before jgr6_09_22_51.2 (fixed in jgr6_09_22_51.2)
• HP Designjet z9+ Pro Firmware: affected versions not specified
• HP Designjet z9 Firmware: before jgr9_09_22_51.2 (fixed in jgr9_09_22_51.2)
• HP Designjet z9dr Firmware: before jgr9_09_22_51.2 (fixed in jgr9_09_22_51.2)
• HP Pagewide Xl 4100: version _firmware only
• HP Pagewide Xl 4500: version _firmware only
• HP Pagewide Xl 4600: version _firmware only
• HP Pagewide Xl 4700: version _firmware only
• HP Pagewide Xl 8000: version _firmware only

Published 2023-04-28. Last modified 2026-06-17.