CVE-2025-27641

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

🚨 Unauthenticated APIs in Vasion Print can open the door to unauthorized access, just like leaving your office unlocked with a huge 'Welcome' sign outside! 🔥 Think of it as a hotel where anyone can walk in without checking in, bypassing the front desk entirely. Without proper authentication, attackers might as well be guests with VIP access! This is absolutely devastating! An attacker could exploit this vulnerability to access sensitive user data or take control of the application entirely, exposing your organization to data breaches and significant operational risks. With a CVSS score of 9.8, the potential fallout is not just high; it’s catastrophic!

Put simply

Think of it as a hotel where anyone can walk in without checking in, bypassing the front desk entirely. Without proper authentication, attackers might as well be guests with VIP access! The vulnerability allows unauthenticated access to the Single Sign-On APIs in Vasion Print versions before Virtual Appliance Host 22.0.951. This means that anyone can send requests and manipulate sessions without needing valid credentials, effectively bypassing security checks.

What to do

This is absolutely devastating! An attacker could exploit this vulnerability to access sensitive user data or take control of the application entirely, exposing your organization to data breaches and significant operational risks. With a CVSS score of 9.8, the potential fallout is not just high; it’s catastrophic! To protect your systems, update to Virtual Appliance Host 22.0.951 or later immediately. Ensure that your APIs are secured by implementing proper authentication checks and review your access controls to prevent unauthorized access. 🛡️ You’ve got this! Stay proactive and secure your systems to keep your data safe! ✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009
    cvelistv5