PT-2025-38596 · Vasion · Vasion Print Application+1

Pierre Barre · Published 2025-09-19 · Updated 2025-10-02 · CVE-2025-34197

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951 Vasion Print (formerly PrinterLogic) Application versions prior to 20.0.2368

Description Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application contain an undocumented local user account named ubuntu with a preset password. This account has a sudoers entry granting it passwordless root privileges. An attacker who knows the hardcoded password can obtain root privileges via local console or equivalent administrative access, leading to local privilege escalation. The vendor has identified this issue as V-2024-010 — Hardcoded Linux Password. It is reported that the patch for this issue is incomplete, specifically that /etc/shadow was remediated, but /etc/sudoers remains vulnerable.

Recommendations Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951: Update to version 22.0.951 or later. Vasion Print (formerly PrinterLogic) Application versions prior to 20.0.2368 (VA and SaaS deployments): Update to version 20.0.2368 or later.

Exploit

Fix

LPE

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-34197

Affected Products

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 10

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-password-ubuntu · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34197 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34197 · Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/CveFindCom/status/1969117110849744902 · Twitter Post
• https://t.me/CVEtracker/32963 · Telegram Post
• https://vulncheck.com/advisories/vasion-print-printerlogic-undocumented-local-account-with-hardcoded-password-and-passwordless-sudo · Note
• https://twitter.com/CVEnew/status/1969110840625545373 · Twitter Post
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://t.me/cveNotify/137264 · Telegram Post