CVE-2025-27667

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration…

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

🚨 An admin email leak in Vasion Print could let attackers gather sensitive information with just a flick of their wrist! 🔥 Imagine a curious coworker who sneaks a peek at your email list without permission, quietly jotting down addresses to exploit later — that's similar to what this vulnerability allows! With the ability to enumerate administrative emails, an attacker could potentially launch targeted phishing attacks or gain insights into your network, putting sensitive data at grave risk. This could lead to unauthorized access, data breaches, or costly downtime. The stakes are exceptionally high—this is not just a minor slip-up; this could be an organization's worst nightmare!

Put simply

Imagine a curious coworker who sneaks a peek at your email list without permission, quietly jotting down addresses to exploit later — that's similar to what this vulnerability allows! This vulnerability allows unauthorized users to enumerate email addresses of administrative users due to improper validation in Vasion Print versions prior to 22.0.843. By exploiting this flaw, an attacker can easily gather a list of email addresses associated with admin accounts.

What to do

With the ability to enumerate administrative emails, an attacker could potentially launch targeted phishing attacks or gain insights into your network, putting sensitive data at grave risk. This could lead to unauthorized access, data breaches, or costly downtime. The stakes are exceptionally high—this is not just a minor slip-up; this could be an organization's worst nightmare! Immediately update to version 22.0.843 or later to mitigate this issue. Additionally, review your configurations to ensure proper access controls are in place. Conduct an audit of existing user accounts to identify and secure any potential weak points. You've got this! By following these steps, you can secure your system and keep those sneaky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00668 · 51.3th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration…
    cvelistv5