CyberSecBulletin
CVE-2025-34235NVD status: Analyzed

Print Virtual Appliance Host: Improper Certificate Validation

Published Updated By the CyberSecBulletin desk

CVE-2025-34235 is a high-severity improper certificate validation vulnerability in Print Virtual Appliance Host from Vasion, with a CVSS 3.1 base score of 7.8 out of 10. It can be exploited with local access to the system by an attacker with a low-privileged account, without any action from a user. The record lists version 25.1.102 as the first without the flaw, so updating Print Virtual Appliance Host to that release or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.48% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update Print Virtual Appliance Host to 25.1.102 or a later version.
  2. Update Print Application to 25.1.1413 or a later version.
  3. Update Virtual Appliance Application to 25.1.1413 or a later version.
  4. Read the advisory on help.printerlogic.com for workarounds and exact fixed builds.

Affected products and versions

VendorProductAffected versionsFixed in
VasionPrint Virtual Appliance Hostbefore 25.1.10225.1.102
VasionPrint Applicationbefore 25.1.141325.1.1413
VasionVirtual Appliance Applicationbefore 25.1.141325.1.1413
VasionVirtual Appliance Hostbefore 25.1.10225.1.102

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
LocalThe attacker needs local access or must trick a user into running something.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Privileges required
LowA basic user account is enough.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Scored by NVD.

Scoring systemScoreSeverityScored by
CVSS 4.09.5CriticalCNA (vulncheck.com)
CVSS 3.17.8HighNVD

Official description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry key that can be enabled by administrators, causing the client to skip SSL/TLS certificate validation. An attacker who can intercept HTTPS traffic can then inject malicious driver DLLs, resulting in remote code execution with SYSTEM privileges; a local attacker can achieve local privilege escalation via a junction‑point DLL injection. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

How developers prevent this class of flaw

  • Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
  • If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

More Improper Certificate Validation vulnerabilities (CWE-295)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: poc, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Technical write-ups (may include proof of concept)

Other vulnerabilities in Print Virtual Appliance Host

All Print Virtual Appliance Host vulnerabilities

Recent Improper Certificate Validation vulnerabilities

Spotted an error? Tell us.