PT-2025-39898 · Printerlogic · Vasion Print Application+1

Pierre Barre · Published 2025-09-29 · Updated 2025-10-02 · CVE-2025-34235

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 Vasion Print (formerly PrinterLogic) Application versions prior to 25.1.1413

Description Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application contain a registry key that, when enabled by administrators, causes the client to bypass SSL/TLS certificate validation. This allows an attacker intercepting HTTPS traffic to inject malicious driver DLLs, potentially leading to remote code execution with SYSTEM privileges. A local attacker could also achieve local privilege escalation through junction-point DLL injection.

Recommendations Update Vasion Print Virtual Appliance Host to version 25.1.102 or later. Update Vasion Print Application to version 25.1.1413 or later.

Exploit

Fix

LPE

RCE

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2026-00258

CVE-2025-34235

Affected Products

Vasion Print Application

Vasion Print Virtual Appliance Host

References · 13

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-lpe-04 · Exploit
• https://osv.dev/vulnerability/CVE-2025-34235 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00258 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34235 · Security Note
• https://vulncheck.com/advisories/vasion-print-printerlogic-weak-ssl-tls-certificate-validation-rce · Note
• https://t.me/CVEtracker/33659 · Telegram Post
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/CveFindCom/status/1972770895237189746 · Twitter Post
• https://twitter.com/0dayPublishing/status/1972766766796320945 · Twitter Post
• https://twitter.com/SecAideInfo/status/1973692852874969104 · Twitter Post
• https://twitter.com/offseq/status/1972859617232159227 · Twitter Post
• https://twitter.com/CVEnew/status/1972771748295618988 · Twitter Post