CVE-2025-27638

The Vasion Print application contains a statically hardcoded password in its source code or configuration (CWE-259 — Use of Hard-coded Password). An attacker knowing this password can authenticate to the system without needing to possess legitimate credentials. The vulnerability is remotely accessible over the network without any prerequisites, making it particularly dangerous in Internet-exposed environments.

An attacker can gain full, unauthorized access to the print management system, which may lead to data confidentiality breach, configuration modification, or disruption of printing services availability in the organization.

Vasion Print should be updated as soon as possible to Virtual Appliance Host version 22.0.1002 or later and Application version 20.0.2614 or later. Details are available in the vendor's security bulletins at help.printerlogic.com.

Vasion Print (formerly PrinterLogic) in Virtual Appliance Host versions before 22.0.1002 and Application versions before 20.0.2614