CVE-2025-34208

moderate-risk
Published 2025-10-02

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's `hash()` function in multiple files (server_write_requests_users.php, update_database.php, legacy/Login.php, tests/Unit/Api/IdpControllerTest.php). No per-user salt is used and the fast hash algorithms are unsuitable for password storage. An attacker who obtains the password database can recover cleartext passwords via offline dictionary or rainbow table attacks. The vulnerable code also contains logic that migrates legacy SHA-1 hashes to SHA-512 on login, further exposing users still on the old hash. This vulnerability was partially resolved, but still present within the legacy authentication platform.

Do I need to act?

-
0.12% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Vasion

References (5)

Vendor Advisory https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
Vendor Advisory https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
Exploit https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabiliti...
Third Party Advisory https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-password...
Exploit https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabiliti...
34
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 7/34 · Low