Vasion Print Virtual Appliance Host/Print Application installApp.php console_release printer_vo missing authentication

Summaryinfo

A vulnerability identified as critical has been detected in Vasion Print Virtual Appliance Host and Print Application. The affected element is the function console_release of the file /var/www/app/console_release/hp/installApp.php. The manipulation of the argument printer_vo leads to missing authentication. This vulnerability is documented as CVE-2025-34229. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Vasion Print Virtual Appliance Host and Print Application (affected version not known). It has been rated as critical. This issue affects the function console_release of the file /var/www/app/console_release/hp/installApp.php. The manipulation of the argument printer_vo with an unknown input leads to a missing authentication vulnerability. Using CWE to declare the problem leads to CWE-306. The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reachable via the /var/www/app/console_release/hp/installApp.php script that can be exploited by an unauthenticated user. When a printer is registered, the software stores the printer’s host name in the variable $printer_vo->str_host_address. The code later builds a URL like 'http://:80/DevMgmt/DiscoveryTree.xml' and sends the request with curl. No validation, whitelist, or private‑network filtering is performed before the request is made. Because the request is blind, an attacker cannot see the data directly, but can still: probe internal services, trigger internal actions, or gather other intelligence. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.

The weakness was released by Pierre Barre. The advisory is shared at pierrekim.github.io. The identification of this vulnerability is CVE-2025-34229 since 04/15/2025. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are known, but no exploit is available.

By approaching the search of inurl:var/www/app/console_release/hp/installApp.php it is possible to find vulnerable targets with Google Hacking.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at EUVD (EUVD-2025-31630) and CERT Bund (WID-SEC-2025-2156). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• Vasion Print

Productinfo

Vendor

• Vasion

Name

• Print Application
• Print Virtual Appliance Host

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion