Read the docs
TI-2025-24354 Aliases CVE-2025-34205GHSA-qh57-ggq7-34mf

Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE

Priority MEDIUM 51CWE-561Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php (found in several containers) lacks authentication checks and, when executed, performs a SQL update that sets the database administrator username to 'root' and its password hash to the SHA-512 hash of the string 'password'. Separately, commented-out code in /var/www/app/lib/common/oses.php would unserialize session data (unserialize($_SESSION['osdata']))—a pattern that can enable remote code execution if re-enabled or reached with attacker-controlled serialized data. An attacker able to reach the resetroot.php endpoint can trivially reset the MySQL root password and obtain full database control; combined with deserialization issues this can lead to full remote code execution and system compromise. This vulnerability has been identified by the vendor as: V-2023-003 — Dead / Insecure PHP Code.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01455 73rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Print Virtual Appliance Host (Vasion): 22.0.843Print Application (Vasion): 20.0.1923

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
VasionPrint Virtual Appliance Hostbefore 22.0.84322.0.843Patch availableCNA
VasionPrint Applicationbefore 20.0.192320.0.1923Patch availableCNA
  • Print Virtual Appliance Host VendorVasion Affected before 22.0.843 Fixed in 22.0.843 Patch available CNA
  • Print Application VendorVasion Affected before 20.0.1923 Fixed in 20.0.1923 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:*before 20.0.1923VulnerableVasion
cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:*before 22.0.843VulnerableVasion
  • cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:* Versions before 20.0.1923 Vulnerable ·Vasion
  • cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:* Versions before 22.0.843 Vulnerable ·Vasion

Remediation

  • Fix · CNA Print Virtual Appliance Host (Vasion) Fixed in 22.0.843
  • Fix · CNA Print Application (Vasion) Fixed in 20.0.1923

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Vasion Print Application, Print Virtual Appliance Host 20.0.1923, 22.0.843

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-24340 Vasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink FollowPriority LOW 39
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-34205
  2. 2026-10-03 Alias added: GHSA-qh57-ggq7-34mf

References

Exploit 1

Patch 2

  • TI-2025-24370 Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification CVSS 4.0CRITICAL 10.0
  • TI-2025-24369 Vasion Print (formerly PrinterLogic) Insecure Installation Credentials CVSS 4.0CRITICAL 10.0
  • TI-2025-24368 Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates CVSS 4.0CRITICAL 10.0
  • TI-2025-24367 Missing authentication in Vasion Print Virtual Appliance Host CVSS 4.0CRITICAL 10.0
  • TI-2025-24364 Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key CVSS 4.0CRITICAL 10.0
  • TI-2025-24363 Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API CVSS 4.0CRITICAL 10.0
See all 42 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences