Vasion Print Virtual Appliance Host Configuration File cleartext storage

Summaryinfo

A vulnerability classified as problematic has been found in Vasion Print Virtual Appliance Host. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. The manipulation leads to an unknown weakness. This vulnerability is documented as CVE-2025-27685. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Vasion Print Virtual Appliance Host (version now known) and classified as problematic. This issue affects some unknown processing of the component Configuration File Handler. Using CWE to declare the problem leads to CWE-312. The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. The impact remains unknown. The summary by CVE is:

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001.

The advisory is shared at help.printerlogic.com. The identification of this vulnerability is CVE-2025-27685 since 03/05/2025. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1555 for this issue.

Upgrading eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Vasion Print

Name

• Virtual Appliance Host

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion