PT-2025-38599 · Vasion · Vasion Print Virtual Appliance

Pierre Barre · Published 2025-09-19 · Updated 2025-09-20 · CVE-2025-34200

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) (affected versions not specified)

Description The Vasion Print Virtual Appliance exposes network account credentials in clear-text within the /etc/issue file, which is world-readable by default. An attacker gaining local shell access can read this file to obtain the network account username and password. Utilizing these credentials, an attacker can modify network parameters through the appliance interface, potentially leading to local misconfiguration, network disruption, or further escalation depending on the deployment environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-34200

Affected Products

Vasion Print Virtual Appliance

References · 9

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-clear-text-password · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34200 · Security Note
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Vendor Advisory
• https://vulncheck.com/advisories/vasion-print-printerlogic-network-account-password-stored-in-cleartext · Note
• https://t.me/CVEtracker/32966 · Telegram Post
• https://twitter.com/CveFindCom/status/1969116954498605353 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1969225248194093310 · Twitter Post
• https://twitter.com/CVEnew/status/1969291948990022097 · Twitter Post