PT-2025-38598 · Printerlogic · Vasion Print Virtual Appliance Host+1

Pierre Barre · Published 2025-09-19 · Updated 2025-09-20 · CVE-2025-34199

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1049 Vasion Print (formerly PrinterLogic) Application versions prior to 20.0.2786

Description Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application deployments contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal microservices. The application disables CURLOPT SSL VERIFYHOST and CURLOPT SSL VERIFYPEER options, and environment variables such as API * VERIFYSSL=false are used to disable verification for gateway and microservice endpoints. This allows the client to accept TLS connections without validating server certificates, and in some cases, uses clear-text HTTP, enabling on-path attackers to perform man-in-the-middle (MitM) attacks. An attacker intercepting network traffic can eavesdrop on and modify sensitive data, including print jobs, configuration, and authentication tokens, inject malicious payloads, or disrupt service.

Recommendations Update Vasion Print Virtual Appliance Host to version 22.0.1049 or later. Update Vasion Print Application to version 20.0.2786 or later.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Improper Certificate Validation

Weakness Enumeration

CWE-319

CWE-295

Related Identifiers

CVE-2025-34199

Affected Products

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 11

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-communications · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34199 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34199 · Vendor Advisory
• https://vulncheck.com/advisories/vasion-print-printerlogic-insecure-ssl-verification-allows-mitm-attacks · Note
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1969227808091119963 · Twitter Post
• https://twitter.com/CVEnew/status/1969291943763947638 · Twitter Post
• https://twitter.com/CveFindCom/status/1969116991500755396 · Twitter Post
• https://twitter.com/offseq/status/1969235347180535975 · Twitter Post
• https://t.me/CVEtracker/32965 · Telegram Post