CVE-2025-27681

The error classified as CWE-602 (Client-Side Enforcement of Server-Side Security) indicates that security logic, which should be enforced on the server side, is improperly implemented or delegated to the client. An attacker can bypass security control mechanisms for communication between processes, enabling unauthorized interaction with the system. The vulnerability is network-accessible, requires no authentication or user interaction.

A remote and unauthenticated attacker can gain full access to the system — compromising the confidentiality, integrity, and availability of data and the print management application.

Vasion Print must be updated to Virtual Appliance Host version 1.0.735 / Application 20.0.1330 or later. Detailed information is available in the vendor's security bulletins at: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm

Vasion Print (formerly PrinterLogic) in Virtual Appliance Host versions below 1.0.735 and Application versions below 20.0.1330.