Information disclosure in HP Inc. Card Readers B Model

CVE-2025-11998

The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in proximity during a card swipe event.

Vulnerability class: Information Disclosure

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References