CVE-2025-27665

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can…

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

🔥 An insufficient antivirus check in Vasion Print could let old malware slip through, like a bouncer letting in party crashers without checking IDs! Think of it like a restaurant that doesn’t check food allergies. If they serve a dish containing peanuts to someone allergic, the results could be absolutely devastating! Similarly, Vasion's lack of proper antivirus checks means malicious drivers can invade your systems without any barriers. If exploited, an attacker could infiltrate your environment with known malicious code, potentially leading to data breaches, system failures, or unauthorized access. This means sensitive information could be compromised, putting your entire organization at serious risk.

Put simply

Think of it like a restaurant that doesn’t check food allergies. If they serve a dish containing peanuts to someone allergic, the results could be absolutely devastating! Similarly, Vasion's lack of proper antivirus checks means malicious drivers can invade your systems without any barriers. The vulnerability arises from insufficient antivirus protection in Vasion Print, allowing drivers containing known malware (OVE-20230524-0009) to be installed without detection, posing a critical risk to system integrity.

What to do

If exploited, an attacker could infiltrate your environment with known malicious code, potentially leading to data breaches, system failures, or unauthorized access. This means sensitive information could be compromised, putting your entire organization at serious risk. Immediate action is essential: upgrade to Virtual Appliance Host version 22.0.843 or later to patch this vulnerability. Additionally, ensure that your antivirus software is properly configured to monitor all driver installations. Regular system audits can help catch any sneaky malware that might have slipped through! You've got this! With the right steps, you'll have your systems locked down in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00668 · 51.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can…
    cvelistv5