CVE-2025-34232

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-34232
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reachable via the /var/www/app/console_release/lexmark/dellCheck.php script that can be exploited by an unauthenticated user. When a printer is registered, the software stores the printer’s host name in the variable $printer_vo->str_host_address. The code later builds a URL like 'http://<host‑address>:80/DevMgmt/DiscoveryTree.xml' and sends the request with curl. No validation, whitelist, or private‑network filtering is performed before the request is made. Because the request is blind, an attacker cannot see the data directly, but can still: probe internal services, trigger internal actions, or gather other intelligence. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm Vendor Advisory
https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm Vendor Advisory
https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-08 Exploit Third Party Advisory
https://www.vulncheck.com/advisories/vasion-print-printerlogic-blind-ssrf-via-lexmark-dellcheck-php-script Third Party Advisory
https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-08 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:*
cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:*
History

18 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Vasion Print (anteriormente PrinterLogic) Host de Dispositivo Virtual anterior a la versión 25.1.102 y Aplicación anterior a la versión 25.1.1413 (implementaciones VA/SaaS) contienen una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) ciega accesible a través del script /var/www/app/console_release/lexmark/dellCheck.PHP que puede ser explotada por un usuario no autenticado. Cuando se registra una impresora, el software almacena el nombre de host de la impresora en la variable $printer_vo -> str_host_address. El código luego construye una URL como 'http://<host?address>:80/DevMgmt/DiscoveryTree.xml' y envía la petición con curl. No se realiza ninguna validación, lista blanca o filtrado de red privada antes de que se realice la petición. Debido a que la petición es ciega, un atacante no puede ver los datos directamente, pero aún puede: sondear servicios internos, activar acciones internas o recopilar otra inteligencia. Se ha confirmado que esta vulnerabilidad ha sido remediada, pero no está claro cuándo se introdujo el parche.
Information

Published : 2025-09-29 21:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-34232

Mitre link : CVE-2025-34232

CVE.ORG link : CVE-2025-34232

JSON object : View

Products Affected

vasion

  • virtual_appliance_host
  • virtual_appliance_application
CWE
CWE-306

Missing Authentication for Critical Function

CWE-918

Server-Side Request Forgery (SSRF)