PT-2025-38597 · Vasion · Vasion Print Application+1

Pierre Barre · Published 2025-09-19 · Updated 2025-09-20 · CVE-2025-34198

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951 Vasion Print (formerly PrinterLogic) Application versions prior to 20.0.2368

Description Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application contain shared, hardcoded SSH host private keys in the appliance image. The same private host keys (RSA, ECDSA, and ED25519) are present across installations, rather than being uniquely generated per appliance. An attacker who obtains these private keys can impersonate the appliance, decrypt or intercept SSH connections, and perform man-in-the-middle or impersonation attacks against administrative SSH sessions.

Recommendations Update Vasion Print Virtual Appliance Host to version 22.0.951 or later. Update Vasion Print Application to version 20.0.2368 or later.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-34198

Affected Products

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 11

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-ssh-keys · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34198 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34198 · Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1969110839480508718 · Twitter Post
• https://twitter.com/offseq/status/1969258012549300455 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1969230368013230590 · Twitter Post
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://vulncheck.com/advisories/vasion-print-printerlogic-shared-hardcoded-ssh-host-private-keys-in-appliance-image · Note
• https://twitter.com/CveFindCom/status/1969117039894622418 · Twitter Post
• https://t.me/CVEtracker/32964 · Telegram Post