CVE-2025-27675

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

🔥 An insecure OpenID implementation in Vasion Print could let attackers impersonate any user without breaking a sweat! 💻 Picture a hotel where anyone can check in just by stating a name, ignoring ID verification — that’s how easy it could be for a malicious actor to gain unauthorized access here! If exploited, attackers could masquerade as legitimate users, potentially compromising sensitive data and leading to unauthorized actions within your printing infrastructure. This could result in data breaches, loss of privacy, and significant operational disruptions. The stakes are high, and it’s absolutely devastating!

Put simply

Picture a hotel where anyone can check in just by stating a name, ignoring ID verification — that’s how easy it could be for a malicious actor to gain unauthorized access here! This vulnerability in Vasion Print stems from an inadequate OpenID implementation, allowing attackers to bypass authentication checks and impersonate users without proper authorization.

What to do

If exploited, attackers could masquerade as legitimate users, potentially compromising sensitive data and leading to unauthorized actions within your printing infrastructure. This could result in data breaches, loss of privacy, and significant operational disruptions. The stakes are high, and it’s absolutely devastating! Immediate action is essential! Upgrade to Virtual Appliance Host 22.0.843 and Application 20.0.1923 to patch this vulnerability. Conduct a thorough audit of all OpenID configurations to ensure they are robust and secure.🛡️ You've got this! Fixing this vulnerability will keep your printing environment secure and reinforce trust. Let's get to work! 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00764 · 54.9th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004
    cvelistv5