CVE-2025-34195CWE-434unrestricted-file-upload

CVE-2025-34195

Critical · published September 19, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

⚡ An unquoted path in the Printer Installer could let attackers execute programs at will—like a surprise party that shows up at the wrong address! 🎉 Imagine a restaurant where the chef doesn't check what the order says, and instead just assumes any dish could be served as long as the name matches. That’s what happens here—if an attacker slips a rogue program at a short path, it could be served up with elevated privileges! This vulnerability allows an attacker to potentially execute arbitrary code on the affected Windows endpoints, which means they could gain unauthorized access, manipulate data, and escalate their privileges within your environment. It's a serious risk that could lead to a full compromise of your systems if left unaddressed!

Put simply

Imagine a restaurant where the chef doesn't check what the order says, and instead just assumes any dish could be served as long as the name matches. That’s what happens here—if an attacker slips a rogue program at a short path, it could be served up with elevated privileges! The remote code execution vulnerability arises during driver installation due to unquoted program paths in the PrinterInstallerClient component, allowing any program at a short path location like C:\Program.exe to run instead of the intended binaries, using the privileges of the installer process.

What to do

This vulnerability allows an attacker to potentially execute arbitrary code on the affected Windows endpoints, which means they could gain unauthorized access, manipulate data, and escalate their privileges within your environment. It's a serious risk that could lead to a full compromise of your systems if left unaddressed! To mitigate this vulnerability, update your Vasion Print Virtual Appliance Host to version 1.0.735 or higher and the Application to version 20.0.1330 or higher. It's also wise to audit your installation paths and correct any unquoted paths to prevent similar issues in the future. This is fixable! Keep your systems updated and secure, and you'll have this vulnerability locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-09-19T23:15Z
Affected products (2)
ProductVersionsFixed in
vasion/virtual_appliance_application< 20.0.133020.0.1330
vasion/virtual_appliance_host< 1.0.7351.0.735
References (4)
EPSS history
Timeline
  • 19 SEP 18:38Z
    Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exe
    cvelistv5