CVE-2025-43018: HP w1a28a Firmware

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.

Affected products

• HP w1a28a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a29a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a30a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a31a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a32a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a33a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a34a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a35a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a38a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a75a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a76a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a77a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a78a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a79a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a80a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a81a Firmware: before 002.2508a (fixed in 002.2508a)
• HP w1a82a Firmware: before 002.2508a (fixed in 002.2508a)

Published 2025-07-30. Last modified 2026-06-17.