CVE-2025-2268: HP 1y7d4a Firmware
High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
Affected products
- HP 1y7d4a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 2a129a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 2a130a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 2a130e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 2u589a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 2u589e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 2u589f Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gw71a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gw99a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gw99e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx00a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx00e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx01a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx02e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx03a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx04a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx05a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx05e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx06a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx09a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6gx09e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 6hu08a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 7md69a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 7md70a Firmware: before 2025-03-24 (fixed in 2025-03-24)
- HP 7md70e Firmware: before 2025-03-24 (fixed in 2025-03-24)
- and 29 more
Published 2025-03-14. Last modified 2026-06-17.