Detections
Analytics

HP LaserJet Printers Cross-site Scripting (CVE-2012-3272)

medium Tenable OT Security Plugin ID 505352

Synopsis

The remote OT asset is affected by a vulnerability.

Description

Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3.18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

See Also

http://www.securitytracker.com/id?1027841

http://www.nessus.org/u?c37c04b1

Plugin Details

Severity: Medium

ID: 505352

File Name: tenable_ot_hp_CVE-2012-3272.nasl

Version: 1.2

Type: Remote

Family: Tenable.ot

Published: 5/26/2026

Updated: 5/28/2026

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Low

Score: 3.0

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2012-3272

CVSS v3

Risk Factor: Medium

Base Score: 6.1

Temporal Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/h:hp:color_laserjet_cp4xxx, cpe:/h:hp:color_laserjet_cm60xx, cpe:/h:hp:color_laserjet_cp6015, cpe:/h:hp:color_laserjet_cm3530, cpe:/h:hp:laserjet_p3015, cpe:/h:hp:color_laserjet_cp3525, cpe:/h:hp:laserjet_p4xxx

Required KB Items: Tenable.ot/HP

Exploit Ease: No known exploits are available

Patch Publication Date: 12/6/2012

Vulnerability Publication Date: 12/6/2012

Reference Information

CVE: CVE-2012-3272

CWE: 79