PT-2025-40402 · Printerlogic+1 · Printerlogic Application+2

Pierre Barre · Published 2025-10-02 · Updated 2025-10-03 · CVE-2025-34210

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) (affected versions not specified)

Description The software stores a significant number of sensitive credentials, including database passwords, MySQL root password, SaaS keys, and Portainer admin password, in cleartext files that are world-readable. Any local user or process with access to the host filesystem can retrieve these credentials in plain text, potentially leading to credential theft and full compromise of the appliance. The vendor attributes this to a shared responsibility model, expecting administrators to configure persistent storage encryption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2025-34210

Affected Products

Printerlogic Application

Printerlogic Virtual Appliance Host

Vasion Print

References · 11

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-readable-passwords · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34210 · Security Note
• https://twitter.com/CveFindCom/status/1973790288507195730 · Twitter Post
• https://twitter.com/0dayPublishing/status/1973786011525132463 · Twitter Post
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://vulncheck.com/advisories/vasion-print-printerlogic-readble-cleartext-passwords · Note
• https://twitter.com/CVEnew/status/1973791450778513546 · Twitter Post
• https://twitter.com/offseq/status/1973946841155739929 · Twitter Post
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://t.me/CVEtracker/33954 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1973959994761453700 · Twitter Post