HP 6hu08a Firmware vulnerabilities

2 CVEs affecting HP 6hu08a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2268, published 2025-03-14.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-2268, published 2025-03-14. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
• CVE-2022-4894, published 2023-08-16. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.