CVE-2025-1004: Certain HP LaserJet Pro Printers – Potential Denial of Service
Published Feb 6, 2025
·Updated
Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP (Internet Printing Protocol).
Affected Software
21 affected components
HP LaserJet Pro Printers
All of the following
HP G3q78a Firmware<2024-10-25
HP G3q78a
All of the following
HP G3q79a Firmware<2024-10-25
HP G3q79a
All of the following
HP Q3q75a Firmware<2024-10-25
HP Q3q75a
All of the following
HP G3q74a Firmware<2024-10-25
HP G3q74a
All of the following
HP G3q77a Firmware<2024-10-25
HP G3q77a
All of the following
HP G3q76a Firmware<2024-10-25
HP G3q76a
All of the following
HP 4pa41a Firmware<2024-10-25
HP 4pa41a
All of the following
HP 4pa42a Firmware<2024-10-25
HP 4pa42a
All of the following
HP 4pa43a Firmware<2024-10-25
HP 4pa43a
All of the following
HP 4pa44a Firmware<2024-10-25
HP 4pa44a
Event History
Feb 6, 2025
CVE Published
via MITRE·09:02 PM
Data Sourced
via MITRE·09:02 PM
DescriptionWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-1004?
CVE-2025-1004 is classified as a denial of service vulnerability impacting certain HP LaserJet Pro printers.
2
How do I fix CVE-2025-1004?
To fix CVE-2025-1004, users should ensure their HP LaserJet Pro printer's firmware is updated to the latest version provided by HP.
3
Which HP printers are affected by CVE-2025-1004?
CVE-2025-1004 affects specific models of HP LaserJet Pro printers that use IPP for printing.
4
Can CVE-2025-1004 be exploited remotely?
Yes, CVE-2025-1004 can potentially be exploited remotely by sending a crafted raw JPEG file to the printer.
5
What are the potential impacts of CVE-2025-1004?
The potential impacts of CVE-2025-1004 include causing the printer to enter a denial of service state, affecting its availability.