kbrain

CVE-2012-5221

MEDIUM · CVSS 5.0EPSS 5.0%EU EUVD

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.

Key facts

CVSS score
5.0 (v2.0)
Severity
MEDIUM
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS score
5.0% (92th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2012-5144)
Published
April 29, 2013
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2012-5144 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

  • hp / color laserjet 3000
  • hp / color laserjet 3800
  • hp / color laserjet 4700
  • hp / color laserjet 4730 mfp
  • hp / color laserjet 5550
  • hp / color laserjet 9500 mfp
  • hp / color laserjet cm6030 mfp
  • hp / color laserjet cm6040 mfp
  • hp / color laserjet cp3505
  • hp / color laserjet cp3525
  • hp / color laserjet cp4005
  • hp / color laserjet cp6015
  • hp / color laserjet enterprise cp4025
  • hp / color laserjet enterprise cp4525
  • hp / digital sender 9250c
  • hp / laserjet 4240
  • hp / laserjet 4250
  • hp / laserjet 4345 mfp
  • hp / laserjet 4350
  • hp / laserjet 5200l
  • hp / laserjet 5200n
  • hp / laserjet 9040
  • hp / laserjet 9040 mfp
  • hp / laserjet 9050
  • hp / laserjet 9050 mfp
  • hp / laserjet enterprise p3015
  • hp / laserjet m3027 mfp
  • hp / laserjet m3035 mfp
  • hp / laserjet m3035 mfp
  • hp / laserjet m4345 mfp
  • hp / laserjet m5025 mfp
  • hp / laserjet m5035 mfp
  • hp / laserjet m9040 mpf
  • hp / laserjet m9050 mpf
  • hp / laserjet p3005
  • hp / laserjet p4014
  • hp / laserjet p4015
  • hp / laserjet p4515

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain