Critical · published September 29, 2025
🚨 A hardcoded private key for the PrinterLogic Certificate Authority lurks in plain sight! This vulnerability is a game changer that could leave your network wide open to cyber villains. 🔥 Imagine leaving the master key to a secure vault in the front desk for anyone to grab! That's what it's like when sensitive configuration files contain hardcoded secrets, allowing attackers to impersonate the CA and decrypt sensitive communications. An attacker armed with these files could easily impersonate the Certificate Authority, signing untrustworthy certificates that would trick the Windows client into thinking it’s communicating securely. This could lead to devastating man-in-the-middle attacks, where attackers intercept or decrypt sensitive data, exposing your entire network to compromise.
Imagine leaving the master key to a secure vault in the front desk for anyone to grab! That's what it's like when sensitive configuration files contain hardcoded secrets, allowing attackers to impersonate the CA and decrypt sensitive communications. This vulnerability in Vasion Print versions prior to 25.1.102 and 25.1.1413 allows attackers to exploit hardcoded private keys and passwords in configuration files, enabling them to sign arbitrary certificates and execute impersonation attacks on the product's network communications.
An attacker armed with these files could easily impersonate the Certificate Authority, signing untrustworthy certificates that would trick the Windows client into thinking it’s communicating securely. This could lead to devastating man-in-the-middle attacks, where attackers intercept or decrypt sensitive data, exposing your entire network to compromise. Update to Vasion Print version 25.1.102 or later and version 25.1.1413 or later for Windows client deployments immediately. Additionally, review configuration files and ensure sensitive data is secured properly to prevent unauthorized access. You've got this! With these updates, you’ll be a security hero, keeping your network safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| vasion/virtual_appliance_application | < 25.1.1413 | 25.1.1413 |
| vasion/virtual_appliance_host | < 25.1.102 | 25.1.102 |