PT-2025-38593 · Microsoft+1 · Windows+4

Pierre Barre · Published 2025-09-19 · Updated 2025-09-29 · CVE-2025-34193

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application

Description The Windows client components (PrinterInstallerClientInterface.exe, PrinterInstallerClient.exe, PrinterInstallerClientLauncher.exe) lack modern exploit mitigations such as Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), and Control Flow Guard (CFG). These components are built as 32-bit applications, without stack-protection, and utilize outdated technologies like Pascal/Delphi and Python 2. Several processes run with elevated privileges, and the client automatically downloads and installs printer drivers. The absence of these mitigations and the use of unmaintained runtimes increases the risk of remote or local code execution and privilege escalation to SYSTEM through memory corruption or maliciously crafted inputs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-1104

Related Identifiers

CVE-2025-34193

Affected Products

Printerinstallerclient

Printerinstallerclientinterface.Exe

Printerinstallerclientlauncher.Exe

Vasion Print

Windows

References · 7

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-insecure-programs · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34193 · Security Note
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Vendor Advisory
• https://twitter.com/CVEnew/status/1969291944841867711 · Twitter Post
• https://vulncheck.com/advisories/vasion-print-printerlogic-insecure-windows-components-lack-modern-memory-protections-and-use-outdated-runtimes · Note
• https://t.me/cveNotify/136863 · Telegram Post