CVE-2026-13753

Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hp.com/us-en/document/ish_15558834-15558856-16/hpsbpi04148
https://www.kb.cert.org/vuls/id/828543

Configurations

No configuration.

History

25 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de falta de autorización en el servidor web integrado de las impresoras HP Deskjet serie 2800 que ejecutan la versión de firmware <=TBP1CN2612AR. Un atacante no autenticado con acceso a la red puede enviar solicitudes GET a múltiples puntos finales de API administrativos expuestos y recuperar datos de configuración sensibles como credenciales de Wi?Fi Direct en texto plano, información de identidad única del dispositivo y otros detalles del estado de seguridad administrativo. Cuando se accede a través de la interfaz web, estas páginas de configuración requieren explícitamente credenciales de administrador antes de que se muestre información sensible.

Information

Published : 2026-07-06 19:16

Updated : 2026-10-25 20:10

NVD link : CVE-2026-13753

Mitre link : CVE-2026-13753

CVE.ORG link : CVE-2026-13753

JSON object : View

Products Affected

No product.

CWE

CWE-703

Improper Check or Handling of Exceptional Conditions

{"id": "CVE-2026-13753", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13753", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-06T19:12:36.743111Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "hp-security-alert@hp.com", "affectedData": [{"vendor": "HP Inc", "product": "HP DeskJet 2820 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2823 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2822 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2829 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2821 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2820 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2828 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2823 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2821 AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2810 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2820e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2842e All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2820e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2821e All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2810e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2821e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2823e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2822e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2823e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2842e All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2827e All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2825e All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DJ 4227e NA OOVWhite Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2842e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2855e AIO Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 2852e All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2875 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2874 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2875 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2876 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2878 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2875 All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2875 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2879 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2878 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2876 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2877 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 2879 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4925", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4927", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 4928 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4925", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4926", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4977", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4929", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 4929 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4928", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 4978 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4975", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage Ultra 4976", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Plus 4220 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4221 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4227 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4228 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4220 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4252e All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4258e All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4255e All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4258e All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4220e All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4222e All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4230e All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet 4210e All-in-One", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 4276 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 4278 All-in-One Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP DeskJet Ink Advantage 4275 Printer", "versions": [{"status": "affected", "version": "0", "lessThan": "<001.2629A", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-06T19:16:55.963", "references": [{"url": "https://support.hp.com/us-en/document/ish_15558834-15558856-16/hpsbpi04148", "source": "hp-security-alert@hp.com"}, {"url": "https://www.kb.cert.org/vuls/id/828543", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "description": [{"lang": "en", "value": "CWE-703"}]}], "descriptions": [{"lang": "en", "value": "Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs."}, {"lang": "es", "value": "Existe una vulnerabilidad de falta de autorizaci\u00f3n en el servidor web integrado de las impresoras HP Deskjet serie 2800 que ejecutan la versi\u00f3n de firmware <=TBP1CN2612AR. Un atacante no autenticado con acceso a la red puede enviar solicitudes GET a m\u00faltiples puntos finales de API administrativos expuestos y recuperar datos de configuraci\u00f3n sensibles como credenciales de Wi?Fi Direct en texto plano, informaci\u00f3n de identidad \u00fanica del dispositivo y otros detalles del estado de seguridad administrativo. Cuando se accede a trav\u00e9s de la interfaz web, estas p\u00e1ginas de configuraci\u00f3n requieren expl\u00edcitamente credenciales de administrador antes de que se muestre informaci\u00f3n sensible."}], "lastModified": "2026-10-25T20:10:00.147", "sourceIdentifier": "hp-security-alert@hp.com"}