CVE-2025-34196: Vasion Virtual Appliance Host hard-coded credentials (CVSS 9.8)

Description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private key for the PrinterLogic Certificate Authority (CA) and a hardcoded password in product configuration files. The Windows client ships the CA certificate and its associated private key (and other sensitive settings such as a configured password) directly in shipped configuration files (for example clientsettings.dat and defaults.ini). An attacker who obtains these files can impersonate the CA, sign arbitrary certificates trusted by the Windows client, intercept or decrypt TLS-protected communications, and otherwise perform man-in-the-middle or impersonation attacks against the product's network communications. This vulnerability has been identified by the vendor as: V-2022-001 — Configuration File Contains CA & Private Key.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Vasion Virtual Appliance Application< 25.1.1413

Vasion Virtual Appliance Host< 25.1.102

Remediation

Fixed in

Vasion Virtual Appliance Application≥ 25.1.1413

Vasion Virtual Appliance Host≥ 25.1.102

Patch & vendor advisories

https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm

References

https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htmVendor Advisory
https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htmNot Applicable
https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-hardcoded-private-keyExploitThird Party Advisory
https://www.vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-printerlogic-ca-private-key-and-hardcoded-passwordThird Party Advisory

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2025-34196 being actively exploited?

CVE-2025-34196 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.48%.

How severe is CVE-2025-34196?

CVE-2025-34196 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 0.48% probability of exploitation.

Which products are affected by CVE-2025-34196?

Affected products include Vasion Virtual Appliance Application, Vasion Virtual Appliance Host.

How do I fix CVE-2025-34196?

Upgrade affected software to a fixed version, for example Vasion Virtual Appliance Application 25.1.1413, Vasion Virtual Appliance Host 25.1.102 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-34196 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo