CVE-2025-27655

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009

Critical ยท published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

๐Ÿšจ A single malicious request can wreak havoc! This Server-Side Request Forgery (SSRF) in Vasion Print allows attackers to trick the server into fetching data from any internal resource. ๐Ÿ”ฅ Think of it like a sneaky delivery driver who, instead of dropping off packages, starts opening every door in your office โ€” they can access sensitive files and internal systems without breaking a sweat! An attacker exploiting this SSRF vulnerability could gain unauthorized access to internal services, potentially exposing sensitive data or even manipulating internal applications. The consequences could range from data leaks to unauthorized actions taken within your network, leading to absolute chaos!

Put simply

Think of it like a sneaky delivery driver who, instead of dropping off packages, starts opening every door in your office โ€” they can access sensitive files and internal systems without breaking a sweat! This vulnerability allows an attacker to craft a request that the server processes, enabling it to access and expose internal resources that should remain isolated from external threats.

What to do

An attacker exploiting this SSRF vulnerability could gain unauthorized access to internal services, potentially exposing sensitive data or even manipulating internal applications. The consequences could range from data leaks to unauthorized actions taken within your network, leading to absolute chaos! Immediate action is crucial! Upgrade to Virtual Appliance Host version 22.0.862 or later to close this security gap. Additionally, review your network access controls to ensure that sensitive internal resources are properly protected from unauthorized requests. ๐Ÿ›ก๏ธ You've got this! Follow these steps to lock things down, and your systems will be safer in no time! ๐Ÿ”’

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 ยท 59.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009
    cvelistv5