PT-2025-39887 · Printerlogic · Vasion Print Application+1

Pierre Barre · Published 2025-09-19 · Updated 2025-10-01 · CVE-2025-34222

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1049 Vasion Print (formerly PrinterLogic) Application versions prior to 20.0.2786

Description The Vasion Print Virtual Appliance Host and Application expose administrative routes without authentication. Specifically, the following API endpoints are affected: /admin/hp/cert upload, /admin/hp/cert delete, /admin/certs/ca, and /admin/certs/serviceclients/{scid}. These routes are defined in the /var/www/app/routes/web.php file within the printercloud/pi Docker container and are managed by the HPCertificateController class, which lacks user validation. An attacker can upload replacement TLS/SSL certificates, delete existing certificates, or download CA and client certificates via an IDOR vulnerability affecting the serviceclients endpoint, allowing enumeration of all client IDs. The vendor has identified this issue as V-2024-028 — Unauthenticated Admin APIs Used to Modify SSL Certificates.

Recommendations Update Vasion Print Virtual Appliance Host to version 22.0.1049 or later. Update Vasion Print Application to version 20.0.2786 or later.

Exploit

Fix

Missing Authentication

Unrestricted File Upload

Weakness Enumeration

CWE-306

CWE-434

Related Identifiers

BDU:2026-00335

CVE-2025-34222

Affected Products

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 9

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-apis-02 · Exploit
• https://osv.dev/vulnerability/CVE-2025-34222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34222 · Security Note
• https://bdu.fstec.ru/vul/2026-00335 · Security Note
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1972765966812463312 · Twitter Post
• https://twitter.com/0dayPublishing/status/1973408511238221923 · Twitter Post
• https://vulncheck.com/advisories/vasion-print-printerlogic-unauth-admin-apis-used-to-modify-ssl-certs · Note