CVE-2025-34215

CVE-2025-34215 is a critical remote code execution vulnerability affecting Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only). It stems from an unauthenticated firmware-upload flow where an attacker can obtain a signed token, extract the appliance's private GPG key and passphrase from Docker images, then decrypt, modify, re-sign, and upload malicious firmware. This allows for complete compromise of the appliance. The vulnerability has a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low attack complexity, and no required user interaction or privileges, leading to high impacts on confidentiality, integrity, and availability. It is classified under CWE-306 (Missing Authentication for Critical Function) and CWE-321 (Use of Hard-coded Cryptographic Key). While not currently listed in CISA's KEV catalog or having public exploit code on Metasploit or ExploitDB, the vulnerability has garnered some community discussion, with one mention indicating awareness of its critical nature. There is no evidence of active exploitation at this time, and it is not on the Hot List.