Certain HP OfficeJet Pro printers may suffer a denial of service when IPP requests are mishandled, causing the printer to fail to establish a TCP connection and become unresponsive. This flaw can halt printing operations and disrupt office workflow, but it does not appear to allow exploitation of confidential data or elevation of privileges.

The vulnerability impacts HP Inc. OfficeJet Pro 8710 All‑In‑One Printer series, including models identified by the CPE strings for HP OfficeJet Pro 8710 printers. The affected firmware is listed under the HP OfficeJet Pro 8710 firmware CPEs.

The CVSS score of 6.9 indicates a moderate to high severity, while the EPSS score of less than 1% suggests a very low probability of widespread exploitation at present. The flaw is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a remote attacker sending crafted IPP traffic over the network to the printer, which is then unable to establish a TCP connection and goes offline. No prerequisites beyond network connectivity to the printer are noted; therefore the vulnerability can be exploited from any location that can reach the printer over IPP.