CVE-2025-27643

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

🔥 A hardcoded AWS API key in Vasion Print is like leaving the front door wide open with a welcome mat for attackers! Imagine your favorite cafe accidentally leaving the vault key under the register—easy access for anyone who knows where to look. That’s what’s happening here with this hardcoded API key, which can give an attacker undue power and control over your cloud resources. If exploited, this flaw could allow an attacker to access and manipulate AWS resources, potentially leading to data breaches, service disruptions, or even total control over cloud infrastructure. The consequences could be absolutely devastating, leaving your entire environment exposed and vulnerable.

Put simply

Imagine your favorite cafe accidentally leaving the vault key under the register—easy access for anyone who knows where to look. That’s what’s happening here with this hardcoded API key, which can give an attacker undue power and control over your cloud resources. This vulnerability occurs because Vasion Print contains a hardcoded AWS API key, which could be exploited to access and manage AWS resources without proper authentication or oversight.

What to do

If exploited, this flaw could allow an attacker to access and manipulate AWS resources, potentially leading to data breaches, service disruptions, or even total control over cloud infrastructure. The consequences could be absolutely devastating, leaving your entire environment exposed and vulnerable. To fix this, immediately update to the latest version of Vasion Print—version 22.0.933 or higher. Additionally, rotate your AWS API keys to prevent unauthorized access, and review your cloud security practices to ensure they are robust. 🛡️ You've got this! Patch up, secure your environment, and you’ll be a security hero in no time! 🦸

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006
    cvelistv5