CVE-2012-3272: Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Col...

Security readout for executives and security teams

This CVE is a cross-site scripting issue in the web interface of several older HP LaserJet and Color LaserJet printers. An attacker could cause the printer interface to run injected script or HTML. The sources do not provide CVSS scoring, affected vectors, or evidence of active exploitation. Exposure is most likely where listed HP printer models are still deployed with embedded web management reachable by users or untrusted networks. Internet-facing management interfaces would raise concern, but the sources do not confirm common exposure patterns. Prioritize this for environments with legacy HP printers, exposed printer management interfaces, or compliance pressure around unsupported devices. It is not KEV-listed and lacks severity data, so urgency depends mainly on exposure and whether firmware is below the fixed versions. Mitigation focus: Follow HP SSRT100778 guidance for the exact printer model and firmware branch.; Upgrade affected printers to firmware at or above the CVE-listed fixed versions.; Restrict embedded web management access to trusted administration networks..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.