CVE-2025-34196

Windows client configuration files (including clientsettings.dat and defaults.ini) contain the PrinterLogic CA certificate along with its associated private key and a hardcoded password. An attacker who gains access to these files can use the CA private key to sign arbitrary certificates accepted by the Windows client. This enables interception and decryption of traffic protected by TLS and allows conducting impersonation and man-in-the-middle attacks against the product's network communications.

An attacker can impersonate a trusted certificate authority, sign arbitrary certificates, intercept and decrypt encrypted TLS communications, and conduct man-in-the-middle and impersonation attacks against Vasion Print infrastructure.

Virtual Appliance Host must be updated to version 25.1.102 or later and Application (Windows client) to version 25.1.1413 or later. Patches and details are available in the vendor's security bulletins at the addresses indicated in the references. After updating, it is recommended to revoke previously issued certificates signed by the compromised CA and replace all passwords stored in configuration files.

Vasion Print (formerly PrinterLogic) Virtual Appliance Host in versions prior to 25.1.102 and Application (Windows client) in versions prior to 25.1.1413