CVE-2025-34192

The vulnerability results from the use of an external component (OpenSSL 1.0.2h-fips) that has received no security updates since 2019 (CWE-1104 — use of outdated external component). Vasion Print software compiles embedded daemons with this library, so known vulnerabilities in TLS/SSL and cryptographic operations remain permanently unpatched. Affected daemons may emit deprecation warnings and use cryptographic components with unresolved weaknesses. A remote attacker, without authentication, may attempt to exploit these weaknesses when processing TLS/SSL traffic.

An attacker may potentially exploit known vulnerabilities in the outdated OpenSSL library to compromise the confidentiality, integrity, or availability of processed data — including data transmitted over an encrypted TLS/SSL channel.

Virtual Appliance Host must be updated to version 22.0.893 or later, and Application to version 20.0.2140 or later. Detailed information on available patches is available in the vendor's security bulletins at the addresses indicated in the references (vendor's internal vulnerability identifier: V-2023-021).

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions below 22.0.893 and Virtual Appliance Application versions below 20.0.2140 (macOS/Linux customer deployments).