CVE-2025-34193CWE-1104CWE-755

CVE-2025-34193

Critical · published September 19, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

⚡ A crafty mix of outdated tech and elevated privileges sets the stage for potential chaos! Vasion Print's client components are running on legacy systems, making them a prime target for crafty attackers. 🚨 Think of it like a high-security vault using a rusty old lock that hasn’t been updated in years. While the vault might still hold valuable items, anyone with the right tools can bypass these outdated defenses and waltz right in! An attacker could finesse their way into executing arbitrary code with SYSTEM privileges, leading to unauthorized access to sensitive data, control over the printing services, or worse! The absence of modern security measures opens the door to devastating exploits, and they could easily turn this vulnerability into a full-blown security nightmare.

Put simply

Think of it like a high-security vault using a rusty old lock that hasn’t been updated in years. While the vault might still hold valuable items, anyone with the right tools can bypass these outdated defenses and waltz right in! This vulnerability stems from Vasion Print's Windows client components which lack essential exploit mitigations such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR). Relying on outdated technologies and running with elevated privileges significantly heightens the risk of remote or local code execution.

What to do

An attacker could finesse their way into executing arbitrary code with SYSTEM privileges, leading to unauthorized access to sensitive data, control over the printing services, or worse! The absence of modern security measures opens the door to devastating exploits, and they could easily turn this vulnerability into a full-blown security nightmare. Upgrade to Vasion Print Virtual Appliance Host version 25.1.102 or higher, and ensure you’re running Application version 25.1.1413 or later. Conduct a thorough review of the components to confirm they're all patched and consider implementing additional security measures to further protect your environment. 🛡️ You've got this! By taking these steps, you're one step closer to locking down your system and keeping those pesky vulnerabilities at bay! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00778 · 55.4th percentile
Weaknesses
CWE-1104 · Use of Unmaintained Third Party Components; CWE-755 · Improper Handling of Exceptional Conditions
Published
2025-09-19T23:15Z
Affected products (2)
ProductVersionsFixed in
vasion/virtual_appliance_applicationall versions—
vasion/virtual_appliance_hostall versions—
References (4)
EPSS history
Timeline
  • 19 SEP 18:47Z
    Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes
    cvelistv5