PHP Dead Code Vulnerability in Vasion Print by PrinterLogic

CVE-2025-34205

What is CVE-2025-34205?

The Vasion Print Virtual Appliance and Application contain dangerous PHP dead code, leading to severe security vulnerabilities. Specifically, the presence of unauthenticated scripts allows attackers to reset the MySQL database administrator credentials simply by accessing the resetroot.php endpoint. This permits full control over the database. Additionally, commented-out code poses a risk of deserialization vulnerabilities, enabling remote code execution if an attacker exploits the unserialize function with manipulated input. Organizations using Vasion Print are strongly advised to update their installations to mitigate these risks.

References