PT-2025-39896 · Printerlogic · Vasion Print Application+1

Pierre Barre · Published 2025-09-29 · Updated 2025-09-29 · CVE-2025-34233

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 Vasion Print (formerly PrinterLogic) Application versions prior to 25.1.1413

Description A protection mechanism failure exists in the file get contents() function within Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application. When an administrator configures a printer’s hostname, the value is passed unchecked to PHP’s file get contents() and cURL functions. These functions follow redirects without restrictions on allow-lists, schemes, or IP ranges. An attacker with administrator-level access can redirect the hostname to a malicious web server that issues a 301 redirect to internal endpoints, such as the AWS EC2 metadata service. This allows the attacker to retrieve metadata, potentially stealing cloud IAM keys, enumerating internal services, and pivoting further into the infrastructure. The issue involves the use of the file get contents() function and the lack of input validation for the hostname parameter.

Recommendations Update Vasion Print Virtual Appliance Host to version 25.1.102 or later. Update Vasion Print Application to version 25.1.1413 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-34233

Affected Products

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 9

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-use-file_get_contents · Exploit
• https://osv.dev/vulnerability/CVE-2025-34233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34233 · Security Note
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://t.me/CVEtracker/33657 · Telegram Post
• https://vulncheck.com/advisories/vasion-print-printerlogic-insecure-use-of-file-get-contents-function · Note
• https://twitter.com/CveFindCom/status/1972770929798201450 · Twitter Post
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1972765974194467211 · Twitter Post