CVE-2025-34196: Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private key for the PrinterLogic Certificate Authority (CA) and a hardcoded password in product configuration files. The Windows client ships the CA certificate and its associated private key (and other sensitive settings such as a configured password) directly in shipped configuration files (for example clientsettings.dat and defaults.ini). An attacker who obtains these files can impersonate the CA, sign arbitrary certificates trusted by the Windows client, intercept or decrypt TLS-protected communications, and otherwise perform man-in-the-middle or impersonation attacks against the product's network communications. This vulnerability has been identified by the vendor as: V-2022-001 — Configuration File Contains CA & Private Key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34196?
CVE-2025-34196 is classified as a high-severity vulnerability due to the presence of hardcoded keys and passwords.
How do I fix CVE-2025-34196?
To mitigate CVE-2025-34196, you should upgrade to Vasion Print versions 25.1.102 or later and the Windows client versions 25.1.1413 or later.
What does CVE-2025-34196 affect?
CVE-2025-34196 affects the Vasion Print Virtual Appliance Host and Windows client deployments prior to specified versions.
What are the risks associated with CVE-2025-34196?
The risks associated with CVE-2025-34196 include unauthorized access and potential compromise of the PrinterLogic Certificate Authority's private key.
Is there a public disclosure for CVE-2025-34196?
Yes, CVE-2025-34196 has been publicly disclosed through various security advisories and bulletins.