Medium severity · published Oct 30, 2025
CVE-2025-11998
HP Card Readers (B Models) – Potential Information Disclosure
6.8
CVSS
0.2%
EPSS
No
On KEV
Description
The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in proximity during a card swipe event.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Card Readers B Model · HP Inc.
1.0 through <2.9 · source: vendor