CVE-2025-27640

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

🚨 An SQL injection lurking in Vasion Print could give attackers the keys to your data kingdom! 🔥 Think of this vulnerability like a restaurant with an open kitchen that accepts any order without checking the recipe—if a rogue chef can simply shout their wishes, they might concoct something dangerous that contaminates the whole menu! With this SQL injection, an attacker could manipulate database queries to extract sensitive information, modify records, or even delete critical data. This could lead to catastrophic data breaches, making it a nightmare for any organization relying on Vasion Print for their printing needs!

Put simply

Think of this vulnerability like a restaurant with an open kitchen that accepts any order without checking the recipe—if a rogue chef can simply shout their wishes, they might concoct something dangerous that contaminates the whole menu! This vulnerability allows unauthorized users to execute arbitrary SQL commands via crafted input, jeopardizing the integrity of the database and allowing access to sensitive data or system controls.

What to do

With this SQL injection, an attacker could manipulate database queries to extract sensitive information, modify records, or even delete critical data. This could lead to catastrophic data breaches, making it a nightmare for any organization relying on Vasion Print for their printing needs! Update your Vasion Print software to the latest version (Virtual Appliance Host 22.0.1002 or Application 20.0.2614). Ensure any input fields in your application are sanitized and implement prepared statements to prevent SQL injection. Conduct a thorough security audit to identify any potential risks. You’ve got this! Patch up and lock down your data fortress! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00738 · 54.0th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012
    cvelistv5