PT-2025-39867 · Vasion+1 · Vasion Print Application+2

Pierre Barre · Published 2025-09-29 · Updated 2025-10-16 · CVE-2025-34196

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 Vasion Print Application versions prior to 25.1.1413

Description The Vasion Print Virtual Appliance Host and Application contain a hardcoded private key for the PrinterLogic Certificate Authority (CA) and a hardcoded password within product configuration files. The Windows client includes the CA certificate, its associated private key, and other sensitive settings, such as a configured password, directly in shipped configuration files like clientsettings.dat and defaults.ini. An attacker gaining access to these files could impersonate the CA, sign arbitrary certificates trusted by the Windows client, intercept or decrypt TLS-protected communications, and conduct man-in-the-middle or impersonation attacks against the product’s network communications.

Recommendations Update Vasion Print Virtual Appliance Host to version 25.1.102 or later. Update Vasion Print Application to version 25.1.1413 or later.

Exploit

Fix

Insufficiently Protected Credentials

Using Hardcoded Credentials

Weakness Enumeration

CWE-522

CWE-798

Related Identifiers

CVE-2025-34196

Affected Products

Printerlogic Certificate Authority

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 9

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-hardcoded-private-key · Exploit
• https://osv.dev/vulnerability/CVE-2025-34196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34196 · Security Note
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://t.me/CVEtracker/33655 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1972787525346300174 · Twitter Post
• https://vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-printerlogic-ca-private-key-and-hardcoded-password · Note
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Vendor Advisory, Patch
• https://t.me/cveNotify/139009 · Telegram Post