Hardcoded SSH Private Keys in Vasion Print Virtual Appliance by PrinterLogic

CVE-2025-34198

What is CVE-2025-34198?

Vasion Print, previously known as PrinterLogic, is affected by a significant security issue where multiple versions of its Virtual Appliance Host and Application contain shared, hardcoded SSH host private keys. These keys are indiscriminately used across installations instead of being uniquely generated for each appliance. An attacker who gains access to these keys could potentially impersonate the affected appliance, enabling them to decrypt or intercept SSH communications. This vulnerability opens the door for malicious actors to execute man-in-the-middle attacks, jeopardizing the integrity and confidentiality of administrative SSH sessions.

References