CVE-2025-27666

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

🚨 Insufficient authorization checks in Vasion Print could allow any user to access sensitive admin functions — a serious oversight just waiting to be exploited! 🔥 Imagine a restaurant where anyone can walk into the kitchen and choose their favorite dish without a chef's permission. That's what this vulnerability allows — unauthorized users can access restricted functions without anyone batting an eye! An attacker could bypass security measures and perform actions reserved for administrators, potentially leading to unauthorized data access, configuration changes, or even system disruption. With a CVSS score of 9.8, this vulnerability is a critical risk and could be absolutely devastating if not addressed immediately!

Put simply

Imagine a restaurant where anyone can walk into the kitchen and choose their favorite dish without a chef's permission. That's what this vulnerability allows — unauthorized users can access restricted functions without anyone batting an eye! This flaw exists in Vasion Print versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 due to inadequate checks on user permissions, allowing unauthorized actions to be executed.

What to do

An attacker could bypass security measures and perform actions reserved for administrators, potentially leading to unauthorized data access, configuration changes, or even system disruption. With a CVSS score of 9.8, this vulnerability is a critical risk and could be absolutely devastating if not addressed immediately! To mitigate this risk, update to Virtual Appliance Host version 22.0.843 and Application version 20.0.1923 immediately. Audit user permissions and ensure that proper authorization checks are in place for sensitive actions. Don't forget to inform your team about these changes! You've got this! By taking these steps, you'll be reinforcing your defenses and ensuring a more secure printing environment. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00618 · 48.9th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010
    cvelistv5