CVE-2025-34224: Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts under the consolerelease directory without requiring authentication. An unauthenticated remote attacker can invoke these endpoints to re‑configure networked printers, add or delete RFID badge devices, or otherwise modify device settings. This vulnerability has been identified by the vendor as: V-2024-029 — No Authentication to Modify Devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34224?
CVE-2025-34224 has a high severity due to the exposure of unauthenticated PHP scripts that can be exploited remotely.
How do I fix CVE-2025-34224?
To fix CVE-2025-34224, upgrade to Vasion Print Virtual Appliance Host version 22.0.1049 or Vasion Print Application version 20.0.2786 or later.
What are the risks associated with CVE-2025-34224?
The risks associated with CVE-2025-34224 include unauthorized access to sensitive functionalities and potential remote code execution.
Which versions are affected by CVE-2025-34224?
Versions prior to 22.0.1049 of Vasion Print Virtual Appliance Host and prior to 20.0.2786 of Vasion Print Application are affected by CVE-2025-34224.
Is CVE-2025-34224 being actively exploited?
As of now, there is potential for active exploitation of CVE-2025-34224 due to its remote unauthenticated access nature.