CVE-2025-11998CWE-200information-disclosure

CVE-2025-11998

published October 30, 2025

CVSS
6.8
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in proximity during a card swipe event.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-30T20:15Z
References (1)
https://support.hp.com/us-en/document/ish_13175687-13175716-16/hpsbpi04065 · [email protected]
EPSS history
Timeline
  • 30 OCT 16:00Z
    HP Card Readers (B Models) – Potential Information Disclosure
    cvelistv5