CVE-2025-34215: Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCE
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (only VA deployments) expose an unauthenticated firmware-upload flow: a public page returns a signed token usable at va-api/v1/update, and every Docker image contains the appliance’s private GPG key and hard-coded passphrase. An attacker who extracts the key and obtains a token can decrypt, modify, re-sign, upload, and trigger malicious firmware, gaining remote code execution. This vulnerability has been identified by the vendor as: V-2024-020 — Remote Code Execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34215?
The severity of CVE-2025-34215 is considered high due to the potential for unauthorized firmware upload without authentication.
How do I fix CVE-2025-34215?
To fix CVE-2025-34215, update Vasion Print to version 22.0.1026 or later and Vasion Application to version 20.0.2702 or later.
What types of Vasion products are affected by CVE-2025-34215?
CVE-2025-34215 affects Vasion Print prior to version 22.0.1026 and Vasion Application for VA deployments prior to version 20.0.2702.
What is the risk associated with CVE-2025-34215?
The risk associated with CVE-2025-34215 includes the possibility of an attacker uploading malicious firmware to the appliance.
Can CVE-2025-34215 be exploited remotely?
Yes, CVE-2025-34215 can be exploited remotely due to the unauthenticated firmware-upload flow.