CVE-2025-27642

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

🚨 A shocking oversight allows unauthorized driver package editing in Vasion Print, putting sensitive systems at serious risk! 🔥 Think of it like a restaurant where anyone can walk into the kitchen and change the menu without permission. It’s recipe chaos, and you never know what might end up on your plate! An attacker could manipulate critical print drivers, potentially causing printers to fail or redirect sensitive documents to the wrong hands. This could lead to confidential data leaks or even operational disruptions—definitely not what you want in a corporate environment!

Put simply

Think of it like a restaurant where anyone can walk into the kitchen and change the menu without permission. It’s recipe chaos, and you never know what might end up on your plate! This vulnerability allows unauthenticated users to edit driver packages in Vasion Print versions before Virtual Appliance Host 22.0.933, making it possible for attackers to introduce malicious code or misconfigurations.

What to do

An attacker could manipulate critical print drivers, potentially causing printers to fail or redirect sensitive documents to the wrong hands. This could lead to confidential data leaks or even operational disruptions—definitely not what you want in a corporate environment! Immediately upgrade to Virtual Appliance Host 22.0.933 or later to patch this vulnerability. Additionally, review your driver package permissions to ensure that only authenticated users can make changes. It’s time for a security check! You’ve got this! With these steps, you’ll be well on your way to locking this down! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008
    cvelistv5