Insecure TLS/SSL Certificate Verification in Vasion Print Virtual Appliance and Application
CVE-2025-34199

9.3CRITICAL

Key Information:

Vendor

Vasion

Status
Print Virtual Appliance Host
Print Application
Vendor
CVE Published:
19 September 2025

What is CVE-2025-34199?

The Vasion Print Virtual Appliance Host and Application are susceptible to vulnerabilities arising from insecure default settings and code practices that disable essential TLS/SSL certificate verification. This flaw allows attackers to conduct man-in-the-middle (MitM) attacks by intercepting traffic between the application and printers or internal microservices, which may lead to unauthorized data access, modification of print jobs, and injection of malicious payloads. Without proper validation of server certificates, sensitive information, including configuration details and authentication tokens, becomes vulnerable to exploitation.

Affected Version(s)

Print Application * < 20.0.2786

Print Virtual Appliance Host * < 22.0.1049

References

https://help.printerlogic.com/saas/Print/Security/Securit...
vendor-advisorypatch
https://pierrekim.github.io/blog/2025-04-08-vasion-printe...
technical-description
https://help.printerlogic.com/va/Print/Security/Security-...
vendor-advisorypatch

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pierre Barre
.
CVE-2025-34199 : Insecure TLS/SSL Certificate Verification in Vasion Print Virtual Appliance and Application