Critical · published September 19, 2025
⚡ An unquoted path in the Printer Installer could let attackers execute programs at will—like a surprise party that shows up at the wrong address! 🎉 Imagine a restaurant where the chef doesn't check what the order says, and instead just assumes any dish could be served as long as the name matches. That’s what happens here—if an attacker slips a rogue program at a short path, it could be served up with elevated privileges! This vulnerability allows an attacker to potentially execute arbitrary code on the affected Windows endpoints, which means they could gain unauthorized access, manipulate data, and escalate their privileges within your environment. It's a serious risk that could lead to a full compromise of your systems if left unaddressed!
Imagine a restaurant where the chef doesn't check what the order says, and instead just assumes any dish could be served as long as the name matches. That’s what happens here—if an attacker slips a rogue program at a short path, it could be served up with elevated privileges! The remote code execution vulnerability arises during driver installation due to unquoted program paths in the PrinterInstallerClient component, allowing any program at a short path location like C:\Program.exe to run instead of the intended binaries, using the privileges of the installer process.
This vulnerability allows an attacker to potentially execute arbitrary code on the affected Windows endpoints, which means they could gain unauthorized access, manipulate data, and escalate their privileges within your environment. It's a serious risk that could lead to a full compromise of your systems if left unaddressed! To mitigate this vulnerability, update your Vasion Print Virtual Appliance Host to version 1.0.735 or higher and the Application to version 20.0.1330 or higher. It's also wise to audit your installation paths and correct any unquoted paths to prevent similar issues in the future. This is fixable! Keep your systems updated and secure, and you'll have this vulnerability locked down in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| vasion/virtual_appliance_application | < 20.0.1330 | 20.0.1330 |
| vasion/virtual_appliance_host | < 1.0.735 | 1.0.735 |