CVE-2012-5221: Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90x...

Security readout for executives and security teams

Certain HP LaserJet, Color LaserJet, and 9250c Digital Sender devices had a PostScript Interpreter flaw that could let a remote attacker read files from the device. The public record does not provide CVSS scoring, exploit status, or technical vectors, so urgency depends on whether affected printers are reachable by untrusted users or networks. Exposure is most likely in environments still running the listed HP models with affected firmware, especially where print services accept PostScript jobs from broad internal networks, guest networks, or external paths. Evidence is insufficient to confirm impact on products beyond those named in the CVE description. Prioritize review where older HP printers remain in production or reachable from untrusted network segments. The business risk is unauthorized disclosure from printer-resident files, but incomplete public details make this a targeted inventory and containment task rather than an emergency absent exposure evidence. Mitigation focus: Inventory the named HP printer and Digital Sender models.; Check firmware versions against HP advisory HPSBPI02869.; Apply HP-provided firmware or mitigation guidance where available..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.