CVE-2025-34224

🚨 A set of PHP scripts lurking in Vasion Print’s `console_release` directory can be exploited without any authentication! An unauthorized user can easily reconfigure your networked printers and even mess with RFID badge devices. 🔥 Think of it like leaving the door to your office wide open while the printer is set to accept print jobs from anyone who walks by — a recipe for chaos! This vulnerability means anyone can walk in and change how your printers behave, just like a prankster rerouting deliveries in a busy mailroom. An unauthenticated attacker could wreak havoc by reconfiguring printers, adding or deleting RFID badge devices, or modifying device settings at will. This could lead to unauthorized access, data breaches, or simply a very frustrating workplace as devices start behaving unpredictably. This is not just a minor issue — it’s a critical risk!

An unauthenticated attacker could wreak havoc by reconfiguring printers, adding or deleting RFID badge devices, or modifying device settings at will. This could lead to unauthorized access, data breaches, or simply a very frustrating workplace as devices start behaving unpredictably. This is not just a minor issue — it’s a critical risk! Upgrade to Vasion Print version 22.0.1049 or higher for the Virtual Appliance Host and 20.0.2786 or higher for the Application. Review your deployment settings to ensure that access controls are properly configured and restrict access to these scripts. You’ve got this! By taking these steps, you’ll secure your environment and keep those printers in check. 🛡️