CVE-2025-34233
Vasion Print (formerly PrinterLogic) Insecure Use of file_get_contents()
Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanism failure vulnerability within the file_get_contents() function. When an administrator configures a printer’s hostname (or similar callback field), the value is passed unchecked to PHP’s file_get_contents()/cURL functions, which follow redirects and impose no allow‑list, scheme, or IP‑range restrictions. An admin‑level attacker can therefore point the hostname to a malicious web server that issues a 301 redirect to internal endpoints such as the AWS EC2 metadata service. The server follows the redirect, retrieves the metadata, and returns or stores the credentials, enabling the attacker to steal cloud IAM keys, enumerate internal services, and pivot further into the SaaS infrastructure. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.
INFO
Published Date :
Sept. 29, 2025, 9:15 p.m.
Last Modified :
Oct. 18, 2026, 9:10 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Affected Products
The following products are affected by CVE-2025-34233
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | MEDIUM | [email protected] | ||||
| CVSS 4.0 | HIGH | 83251b91-4cc7-4094-a5c7-464a1b83ea10 | ||||
| CVSS 4.0 | HIGH | [email protected] |
Solution
- Update Vasion Print Virtual Appliance Host to version 25.1.102 or later.
- Update Vasion Print Application to version 25.1.1413 or later.
- Apply available security patches promptly.
- Review and restrict external network access.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-34233.
| URL | Resource |
|---|---|
| https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm | Vendor Advisory |
| https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm | Vendor Advisory |
| https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-use-file_get_contents | Exploit Third Party Advisory |
| https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-use-of-file-get-contents-function | Third Party Advisory |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-34233 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-34233
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-34233 vulnerability anywhere in the article.
-
seclists.org
Re: 83 vulnerabilities in Vasion Print / PrinterLogic
Full Disclosure mailing list archives From: Pierre Kim <pierre.kim.sec () gmail com> Date: Tue, 11 Nov 2025 10:28:50 -0500 Hello, VulnCheck has assigned the following CVEs to the previously disclosed ... Read more
The following table lists the changes that have been made to the
CVE-2025-34233 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 18, 2026
Action Type Old Value New Value Added Translation Title: Print Virtual Appliance Host y Print Application de Vasion, Description: Vasion Print (anteriormente PrinterLogic) Virtual Appliance Host anterior a la versión 25.1.102 y Application anterior a la versión 25.1.1413 (implementaciones VA/SaaS) contienen una vulnerabilidad de fallo en el mecanismo de protección dentro de la función file_get_contents(). Cuando un administrador configura el nombre de host de una impresora (o un campo de devolución de llamada similar), el valor se pasa sin verificar a las funciones file_get_contents()/cURL de PHP, las cuales siguen redirecciones y no imponen restricciones de lista de permitidos, esquema o rango de IP. Un atacante de nivel de administrador puede, por lo tanto, apuntar el nombre de host a un servidor web malicioso que emite una redirección 301 a puntos finales internos como el servicio de metadatos de AWS EC2. El servidor sigue la redirección, recupera los metadatos y devuelve o almacena las credenciales, lo que permite al atacante robar claves IAM de la nube, enumerar servicios internos y pivotar aún más en la infraestructura SaaS. Se ha confirmado que esta vulnerabilidad ha sido remediada, pero no está claro cuándo se introdujo el parche. -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Vasion', 'modules': ['file_get_contents()'], 'product': 'Print Virtual Appliance Host', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '25.1.102', 'versionType': 'semver'}], 'defaultStatus': 'unaffected'}, {'vendor': 'Vasion', 'modules': ['file_get_contents()'], 'product': 'Print Application', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '25.1.1413', 'versionType': 'semver'}], 'defaultStatus': 'unaffected'}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2025-34233', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'poc'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2025-09-30T13:33:17.330504Z'} -
Initial Analysis by [email protected]
Oct. 09, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Added CPE Configuration OR *cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:* versions up to (excluding) 25.1.1413 *cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:* versions up to (excluding) 25.1.102 Added Reference Type VulnCheck: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm Types: Vendor Advisory Added Reference Type VulnCheck: https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm Types: Vendor Advisory Added Reference Type VulnCheck: https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-use-file_get_contents Types: Exploit, Third Party Advisory Added Reference Type VulnCheck: https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-use-of-file-get-contents-function Types: Third Party Advisory -
New CVE Received by [email protected]
Sep. 29, 2025
Action Type Old Value New Value Added Description Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanism failure vulnerability within the file_get_contents() function. When an administrator configures a printer’s hostname (or similar callback field), the value is passed unchecked to PHP’s file_get_contents()/cURL functions, which follow redirects and impose no allow‑list, scheme, or IP‑range restrictions. An admin‑level attacker can therefore point the hostname to a malicious web server that issues a 301 redirect to internal endpoints such as the AWS EC2 metadata service. The server follows the redirect, retrieves the metadata, and returns or stores the credentials, enabling the attacker to steal cloud IAM keys, enumerate internal services, and pivot further into the SaaS infrastructure. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Added CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CWE CWE-918 Added Reference https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm Added Reference https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm Added Reference https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-use-file_get_contents Added Reference https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-use-of-file-get-contents-function