CVE-2025-27659

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows SQL Injection OVE-20230524-0002

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

🔥 A sneaky SQL injection vulnerability lurks in Vasion Print versions before 20.0.1923, making it a prime target for attackers! ⚡ Think of this as a waiter who forgets to check orders before serving — if someone can slip a hidden request, they could change the whole menu without a trace! An attacker exploiting this vulnerability could gain unauthorized access to the database, allowing them to read, modify, or even delete sensitive data. This could lead to devastating consequences for your organization, including data breaches and loss of essential information.

Put simply

Think of this as a waiter who forgets to check orders before serving — if someone can slip a hidden request, they could change the whole menu without a trace! This SQL injection vulnerability allows attackers to manipulate database queries through the application, potentially compromising sensitive information stored in the database.

What to do

An attacker exploiting this vulnerability could gain unauthorized access to the database, allowing them to read, modify, or even delete sensitive data. This could lead to devastating consequences for your organization, including data breaches and loss of essential information. Immediate action is required: upgrade to Virtual Appliance Host 22.0.843 or Application 20.0.1923 to close this loophole. Regularly audit your database queries to ensure they’re securely written. Don't forget to implement input validation to protect against future injections! You’ve got this! Follow these steps, and you’ll restore security to your Vasion Print setup in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00738 · 54.0th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows SQL Injection OVE-20230524-0002
    cvelistv5