CVE-2025-34192criticalCWE-1104

CVE-2025-34192: critical vulnerability in Vasion Print Application

Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

Published · Updated

Follow this CVE+ Monitor Print Application+ Monitor Print Virtual Appliance Host

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 1.0%
In short

Vasion Print uses an old, unsupported version of OpenSSL (1.0.2h from 2016) that no longer receives security fixes. This exposes the software to known security flaws that attackers could exploit to compromise encrypted communications and data security.

Technical detail

The affected Vasion Print Virtual Appliance Host (<22.0.893) and Application (<20.0.2140) are compiled against OpenSSL 1.0.2h-fips, end-of-life since 2019. The outdated cryptographic library contains unpatched vulnerabilities affecting TLS/SSL and cryptographic operations, enabling potential exploitation of weaknesses in secure communications without vendor-provided patches.

Summary generated and translated by AI from the official description.
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been end-of-life since 2019 and is no longer supported by the OpenSSL project. Continued use of this outdated cryptographic library exposes deployments to known vulnerabilities that are no longer patched, weakening the overall security posture. Affected daemons may emit deprecation warnings and rely on cryptographic components with unresolved security flaws, potentially enabling attackers to exploit weaknesses in TLS/SSL processing or cryptographic operations. This vulnerability has been identified by the vendor as: V-2023-021 — Out-of-Date OpenSSL Library.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Vasion · Print ApplicationVasion · Print Virtual Appliance Host
Related CVEs — Vasion Print Application

In the same product, most dangerous first.

CVE-2025-34205CRITICALVasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCEEPSS 1.5%CVE-2025-34221CRITICALVasion Print (formerly PrinterLogic)EPSS 1.5%CVE-2025-34223CRITICALVasion Print (formerly PrinterLogic) Insecure Installation CredentialsEPSS 1.2%CVE-2025-34215CRITICALVasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCEEPSS 1.1%CVE-2025-34218CRITICALVasion Print (formerly PrinterLogic) Exposed Internal Docker InstanceEPSS 1.0%CVE-2025-34202HIGHVasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WANEPSS 1.0%