TI-2025-24359 Aliases CVE-2025-34210 GHSA-2g9f-v599-7rv2

Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords

HIGH 76CWE-256Published 2025-10-02 · Updated 2025-11-17

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Information disclosure
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-256.

Summary

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store a large number of sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) in cleartext files that are world-readable. Any local user - or any process that can read the host filesystem - can retrieve all of these secrets in plain text, leading to credential theft and full compromise of the appliance. The vendor does not consider this to be a security vulnerability as this product "follows a shared responsibility model, where administrators are expected to configure persistent storage encryption."

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.0016 5th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Vasion	Print Virtual Appliance Host	all versions	—	No fix listed	CNA
Vasion	Print Application	all versions	—	No fix listed	CNA

Print Virtual Appliance Host VendorVasion Affected all versions Fixed in — No fix listed CNA
Print Application VendorVasion Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:vasion:virtual_appliance_application:-:::::::*	not specified by NVD	Vulnerable	Vasion
cpe:2.3:a:vasion:virtual_appliance_host:-:::::::*	not specified by NVD	Vulnerable	Vasion

cpe:2.3:a:vasion:virtual_appliance_application:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Vasion
cpe:2.3:a:vasion:virtual_appliance_host:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Vasion

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-34210
2026-10-03 Alias added: GHSA-2g9f-v599-7rv2

References

Exploit 1

https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-readable-passwords

Patch 2

TI-2025-24370 Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification CVSS 4.0CRITICAL 10.0
TI-2025-24369 Vasion Print (formerly PrinterLogic) Insecure Installation Credentials CVSS 4.0CRITICAL 10.0
TI-2025-24368 Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates CVSS 4.0CRITICAL 10.0
TI-2025-24367 Missing authentication in Vasion Print Virtual Appliance Host CVSS 4.0CRITICAL 10.0
TI-2025-24364 Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key CVSS 4.0CRITICAL 10.0
TI-2025-24363 Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API CVSS 4.0CRITICAL 10.0

See all 42 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences