Vulnerability · Published Sep 29, 2025 · Assigned by VulnCheck

CVE-2025-34225Vasion Print (formerly PrinterLogic) SSRF via console_release Directory

High 8.8

In plain English

A high-severity missing authentication in Print Application from Vasion. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 4.0)8.8High

Exploit odds (30 days)0.8%top 42.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The `console_release` directory is reachable from the internet without any authentication. Inside that directory are dozens of PHP scripts that build URLs from user‑controlled values and then invoke either 'curl_exec()` or `file_get_contents()` without proper validation. Although many files attempt to mitigate SSRF by calling `filter_var', the checks are incomplete. Because the endpoint is unauthenticated, any remote attacker can supply a hostname and cause the server to issue requests to internal resources. This enables internal network reconnaissance, potential pivoting, or data exfiltration. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.

Affected products (as reported)

Vendor	Product	Versions
Vasion	Print Virtual Appliance Host	0 – before 25.1.102
Vasion	Print Application	0 – before 25.1.1413

Weakness: CWE-306, CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

References

https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-03 technical-description
https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm vendor-advisory, patch
https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm vendor-advisory, patch
https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-console-release-directory third-party-advisory