CVE-2025-11998 — HP Card Readers (B Models) – Potential Information Disclosure

CVE-2025-11998

HP Card Readers (B Models) – Potential Information Disclosure PUBLISHED

Description (CNA)

The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in proximity during a card swipe event.

Affected (CNA)

Vendor / product	Versions
HP Inc. / Card Readers B Model	affected 1.0 through <2.9

CWE

CWE-200

References

https://support.hp.com/us-en/document/ish_13175687-13175716-16/hpsbpi04065

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.