CVE-2025-27658

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

🚨 An authentication bypass flaw in Vasion Print could give attackers free rein without needing a password! 🔥 Picture a VIP concert where the security guard lets anyone in without checking tickets – that’s what this vulnerability does by letting unauthorized users access sensitive areas without verification. A malicious actor could exploit this vulnerability to access and manipulate print jobs, retrieve confidential documents, or even alter system settings. With a CVSS score of 9.8, the implications are absolutely devastating, as it allows unauthorized access to critical printing infrastructures directly.

Put simply

Picture a VIP concert where the security guard lets anyone in without checking tickets – that’s what this vulnerability does by letting unauthorized users access sensitive areas without verification. The vulnerability stems from insufficient authentication checks in Vasion Print before version 22.0.843. This means that users can bypass authentication mechanisms to gain unauthorized access, compromising the system's integrity.

What to do

A malicious actor could exploit this vulnerability to access and manipulate print jobs, retrieve confidential documents, or even alter system settings. With a CVSS score of 9.8, the implications are absolutely devastating, as it allows unauthorized access to critical printing infrastructures directly. Patch your Vasion Print installation to version 22.0.843 or later immediately. Additionally, review your security settings and ensure best practices are followed to prevent unauthorized access in the future. You've got this! Follow these steps, and you'll lock down your system in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00906 · 59.5th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001
    cvelistv5