CVE-2025-34192CWE-1104

CVE-2025-34192

Critical · published September 19, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

🚨 Outdated OpenSSL putting you at serious risk! Vasion Print’s virtual appliance and application versions prior to 22.0.893 are built on OpenSSL 1.0.2h-fips, a library that has been gathering dust since 2019! 🔥 Think of this as using a security system that hasn’t been updated since the days of dial-up internet — it's like having a bouncer at the door who doesn’t recognize the latest threats and lets anyone right in! An attacker could exploit this vulnerability to compromise your TLS/SSL connections, gaining unauthorized access to sensitive information. This can lead to data leaks or even complete system takeover, leaving your organization's security in shambles. It's absolutely devastating!

Put simply

Think of this as using a security system that hasn’t been updated since the days of dial-up internet — it's like having a bouncer at the door who doesn’t recognize the latest threats and lets anyone right in! This vulnerability stems from using an outdated version of OpenSSL, which has known security flaws that are no longer patched. Affected systems may emit warnings and rely on these unaddressed flaws for cryptographic operations, making them ripe for exploitation.

What to do

An attacker could exploit this vulnerability to compromise your TLS/SSL connections, gaining unauthorized access to sensitive information. This can lead to data leaks or even complete system takeover, leaving your organization's security in shambles. It's absolutely devastating! Immediate action is crucial! Upgrade to Vasion Print versions 22.0.893 or later, and for macOS/Linux clients, ensure you're on application version 20.0.2140 or higher. Don't let this outdated library compromise your security! You’ve got this! Follow these steps and you’ll be well on your way to securing your systems. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00962 · 61.3th percentile
Weakness
CWE-1104 · Use of Unmaintained Third Party Components
Published
2025-09-19T23:15Z
Affected products (2)
ProductVersionsFixed in
vasion/virtual_appliance_application< 20.0.214020.0.2140
vasion/virtual_appliance_host< 22.0.89322.0.893
References (4)
EPSS history
Timeline
  • 19 SEP 18:39Z
    Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version
    cvelistv5