CVE-2025-27657

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

🚨 A remote code execution flaw in Vasion Print could let attackers take control from anywhere — and the stakes couldn't be higher! 🔥 Think of it like a restaurant where the head chef is gone, and anyone can walk in, cook whatever they want, and serve it to customers. That's how easy it could be for an attacker to exploit this vulnerability and execute malicious code on your servers! An attacker could potentially execute any command on the affected Vasion Print systems, leading to unauthorized data access, data manipulation, or even total system compromise. This could be absolutely devastating for businesses relying on this service, risking sensitive information and operational integrity.

Put simply

Think of it like a restaurant where the head chef is gone, and anyone can walk in, cook whatever they want, and serve it to customers. That's how easy it could be for an attacker to exploit this vulnerability and execute malicious code on your servers! This vulnerability exists in Vasion Print versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, allowing attackers to run arbitrary code remotely due to inadequate input validation.

What to do

An attacker could potentially execute any command on the affected Vasion Print systems, leading to unauthorized data access, data manipulation, or even total system compromise. This could be absolutely devastating for businesses relying on this service, risking sensitive information and operational integrity. Immediately upgrade to Virtual Appliance Host 22.0.843 and Application 20.0.1923 to patch this critical vulnerability. Additionally, assess your network security and restrict access to the affected servers to trusted sources only. You've got this! By taking these steps, you're not only patching a hole but also securing your environment. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01690 · 76.9th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008
    cvelistv5