CVE-2025-27649

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

🚨 A critical access control flaw in Vasion Print means unauthorized users could get too close to sensitive data! 🔥 Think of it like a hotel where anyone can wander into the staff-only areas without a keycard — sensitive customer information is just hanging out in the open! An attacker could potentially access private documents, modify settings, or even disrupt print services entirely. Imagine a rogue guest wreaking havoc, leaving chaos in the hotel lobby. This could lead to serious data breaches and operational downtime!

Put simply

Think of it like a hotel where anyone can wander into the staff-only areas without a keycard — sensitive customer information is just hanging out in the open! This vulnerability allows improper access control in Vasion Print versions before 22.0.893, letting unauthorized users bypass necessary restrictions and access sensitive areas of the application.

What to do

An attacker could potentially access private documents, modify settings, or even disrupt print services entirely. Imagine a rogue guest wreaking havoc, leaving chaos in the hotel lobby. This could lead to serious data breaches and operational downtime! Update to Virtual Appliance Host 22.0.893 or later immediately to secure your environment. Review your access control configurations and ensure that only authorized personnel have the right access. Additionally, perform regular audits to keep everything locked down! You've got this! Following these steps will help you patch up this critical flaw and keep your system secure. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016
    cvelistv5