TI-2025-24363 Aliases CVE-2025-34216 GHSA-c3qf-8gq3-mgrm

Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API

HIGH 82CWE-306Published 2025-09-29 · Updated 2026-05-15

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass, Information disclosure
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306 and CWE-312.

Summary

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthenticated REST API endpoints that return configuration files and clear‑text passwords. The same endpoints also disclose the Laravel APP_KEY used for cryptographic signing. Because the APP_KEY is required to generate valid signed requests, an attacker who obtains it can craft malicious payloads that are accepted by the application and achieve remote code execution on the appliance. This vulnerability has been identified by the vendor as: V-2024-018 — RCE & Leaks via API.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00814 57th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Print Virtual Appliance Host (Vasion): 22.0.1026Print Application (Vasion): 20.0.2702

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Vasion	Print Virtual Appliance Host	before 22.0.1026	22.0.1026	Patch available	CNA
Vasion	Print Application	before 20.0.2702	20.0.2702	Patch available	CNA

Print Virtual Appliance Host VendorVasion Affected before 22.0.1026 Fixed in 22.0.1026 Patch available CNA
Print Application VendorVasion Affected before 20.0.2702 Fixed in 20.0.2702 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:vasion:virtual_appliance_application::::::::	before 20.0.2702	Vulnerable	Vasion
cpe:2.3:a:vasion:virtual_appliance_host::::::::	before 22.0.1026	Vulnerable	Vasion

cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:* Versions before 20.0.2702 Vulnerable ·Vasion
cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:* Versions before 22.0.1026 Vulnerable ·Vasion

Remediation

Fix · CNA Print Virtual Appliance Host (Vasion) Fixed in 22.0.1026
Fix · CNA Print Application (Vasion) Fixed in 20.0.2702

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2025-09-29
Vasion Print Application, Print Virtual Appliance Host 20.0.2702, 22.0.1026
2 records Highest priority Priority HIGH 2 HIGH
Other records, highest priority first
- TI-2025-24362 Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCEPriority HIGH 76
Show all 2 records →

Timeline

2026-10-02 Threatist record created from CVE-2025-34216
2026-10-03 Alias added: GHSA-c3qf-8gq3-mgrm

References

Exploit 1

https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-rce-03

Patch 2

TI-2025-24370 Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification CVSS 4.0CRITICAL 10.0
TI-2025-24369 Vasion Print (formerly PrinterLogic) Insecure Installation Credentials CVSS 4.0CRITICAL 10.0
TI-2025-24368 Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates CVSS 4.0CRITICAL 10.0
TI-2025-24367 Missing authentication in Vasion Print Virtual Appliance Host CVSS 4.0CRITICAL 10.0
TI-2025-24364 Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key CVSS 4.0CRITICAL 10.0
TI-2025-24352 Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components CVSS 4.0CRITICAL 9.3

See all 42 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences