CVE-2025-27638

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

🔥 A hardcoded password lurking in Vasion Print could spell disaster! This means anyone with insider knowledge could waltz right in with the keys to your kingdom! ⚡ Think of it like a hotel with a master key left carelessly under the doormat. Any guest could stroll in and access any room without a second glance, leading to chaos and privacy breaches. If exploited, an attacker could gain full access to the Vasion Print system, allowing them to view, modify, or delete sensitive print jobs and user data. This could lead to devastating data leaks and significant operational disruption, putting your organization at severe risk.

Put simply

Think of it like a hotel with a master key left carelessly under the doormat. Any guest could stroll in and access any room without a second glance, leading to chaos and privacy breaches. This vulnerability resides in Vasion Print prior to version 22.0.1002 and involves a hardcoded password, enabling unauthorized access without requiring valid credentials.

What to do

If exploited, an attacker could gain full access to the Vasion Print system, allowing them to view, modify, or delete sensitive print jobs and user data. This could lead to devastating data leaks and significant operational disruption, putting your organization at severe risk. Immediately upgrade to Virtual Appliance Host 22.0.1002 or later and ensure you replace the hardcoded password with a strong, unique one. Additionally, consider auditing your security policies to prevent similar issues in the future. You've got this! Take action now, and you'll have your system secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013
    cvelistv5