First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-43018

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
HP, Inc.	Certain HP LaserJet Pro Printers	See HP security bulletin reference for affected versions

References

https://support.hp.com/us-en/document/ish_12807011-12807034-16/hpsbpi04040Vendor Advisory

Timeline

Published: Jul 30, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-430197.8A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via CVE-2025-43025.3The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. How CVE-2025-430206.8A potential command injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability CVE-2025-430215.7A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could al CVE-2025-430227.2A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability cou CVE-2025-430239.1A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerabi CVE-2025-430247.5A GUI dialog of an application allows to view what files are in the file system without proper authorization.CVE-2025-430257.5HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older (e.g., v7.3.CVE-2025-430267.8A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could CVE-2025-430279.8A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain adminis CVE-2025-43039.8A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affecte CVE-2025-43049.8A vulnerability, which was classified as critical, was found in PHPGurukul Cyber Cafe Management System 1.0. This affects an unknown part of

CVE-2025-43018: Medium severity, CVSS 5.3 | Vulnix