CVE-2025-27663

The Vasion Print application stores or processes passwords using a weak encryption or encoding algorithm (CWE-521), which does not provide adequate cryptographic protection. An attacker who gains access to stored data (e.g., through another vulnerability or access to the file system/database) can relatively easily reverse the process and recover passwords in plaintext. The lack of requirements for strong password protection mechanisms means that authentication credentials are exposed to compromise.

An attacker can recover user or system administrator passwords, leading to unauthorized access to resources, account takeover, and potential lateral movement within the organization's network.

Vasion Print should be updated to Virtual Appliance Host version 22.0.843 or newer and Application 20.0.1923 or newer. Detailed information is available in the vendor's security bulletins at: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm

Vasion Print (formerly PrinterLogic) in Virtual Appliance Host versions below 22.0.843 and Application versions below 20.0.1923