CVE-2025-27674

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

🔥 A hardcoded IdP key in Vasion Print could let someone waltz right into your system, bypassing all security checks! Think of it like having a spare key hidden under the welcome mat. Anyone who finds it can stroll right into your house without needing to prove their identity! This vulnerability opens the door for unauthorized access, meaning attackers could potentially manipulate your print management without detection. Imagine someone changing settings, accessing sensitive documents, or even shutting the entire system down – absolutely devastating!

Put simply

Think of it like having a spare key hidden under the welcome mat. Anyone who finds it can stroll right into your house without needing to prove their identity! Vasion Print has a hardcoded Identity Provider key that allows for authentication bypass, effectively granting access to anyone who knows this key without additional verification.

What to do

This vulnerability opens the door for unauthorized access, meaning attackers could potentially manipulate your print management without detection. Imagine someone changing settings, accessing sensitive documents, or even shutting the entire system down – absolutely devastating! Update Vasion Print to Virtual Appliance Host 22.0.843 or later immediately to eliminate this vulnerability. Additionally, review your security policies to ensure no hardcoded credentials exist in your applications! You've got this! Act now to secure your system and keep your print management fortress strong! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00707 · 52.9th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006
    cvelistv5