by Kastro
Paper/Archive/CVE-2025-34235

CVE-2025-34235

Vasion Print Virtual Appliance Host — Vasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCE

EPSS 0.5%public exploitCVSS 9.5
critical.is priorityof 100
47
CVSS 9.5 (CNA)9.5 / 10 × 3028.5Not in CISA KEV+300.0EPSS percentile 41.7.417 × 208.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry key that can be enabled by administrators, causing the client to skip SSL/TLS certificate validation. An attacker who can intercept HTTPS traffic can then inject malicious driver DLLs, resulting in remote code execution with SYSTEM privileges; a local attacker can achieve local privilege escalation via a junction‑point DLL injection. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.

Affected

ProductAffectedFixed inSource
Print Virtual Appliance Host< 25.1.10225.1.102CNA
Print Application< 25.1.141325.1.1413CNA

Scores by source

VulnCheck (CNA)9.5CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitpierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-lpe-04patchhelp.printerlogic.com/va/Print/Security/Security-Bulletins.htmpatchhelp.printerlogic.com/saas/Print/Security/Security-Bulletins.htmwriteupvulncheck.com/advisories/vasion-print-printerlogic-weak-ssl-tls-certificate-validation-rce