PT-2025-39889 · Vasion · Vasion Print Application+2

Pierre Barre · Published 2025-09-29 · Updated 2025-09-30 · CVE-2025-34224

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Vasion Print versions prior to 22.0.1049 Vasion Print versions prior to 20.0.2786

Description Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application deployments expose PHP scripts located in the console release directory without authentication. An unauthenticated remote attacker can utilize these scripts to modify networked printer configurations, add or delete RFID badge devices, and alter device settings. The exposed endpoints allow for unauthorized device modification.

Recommendations Update Vasion Print Virtual Appliance Host to version 22.0.1049 or later. Update Vasion Print Application to version 20.0.2786 or later.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-34224

Affected Products

Vasion Print

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 8

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-lack-of-auth-manage-printers · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34224 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34224 · Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://vulncheck.com/advisories/vasion-print-printerlogic-unauth-device-modification · Note
• https://twitter.com/0dayPublishing/status/1973049891392761865 · Twitter Post
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1972771751063916829 · Twitter Post