CVE-2025-34211 Vasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys
Attackers with container access can extract hardcoded SSL keys to decrypt traffic, perform MITM attacks, and impersonate the Vasion Print web interface.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-34211?
CVE-2025-34211 is a critical vulnerability in Vasion Print Application, published on 29 Sep 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL key and matching public certificate stored in cleartext. The key belongs to the hostname `pl‑local.com` and is used by the appliance to terminate TLS connections on ports 80/443. Because the key is hardcoded, any attacker who can gain container-level access can simply read the files and obtain the private key. With the private key, the attacker can decrypt TLS traffic, perform man-in-the-middle attacks, or forge TLS certificates. This enables impersonation of the appliance’s web UI, interception of credentials, and unrestricted access to any services that trust the certificate. The same key is identical across all deployed appliances meaning a single theft compromises the confidentiality of every Vasion Print installation. This vulnerability has been identified by the vendor as: V-2024-025 — Hardcoded SSL Certificate & Private Keys.
Weakness: CWE-321
Which versions are affected by CVE-2025-34211?
It affects 2 products.
Products include Vasion Virtual Appliance Application, Vasion Virtual Appliance Host.
How do I fix CVE-2025-34211?
No fix has been published for CVE-2025-34211 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-34211 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-34211 exists.
Other vulnerabilities in Vasion Print Application
- CVE-2025-34217 Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key
- CVE-2025-34216 Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API
- CVE-2025-34218 Vasion Print (formerly PrinterLogic) Exposed Internal Docker Instance
- CVE-2025-34221 Vasion Print (formerly PrinterLogic)
- CVE-2025-34222 Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates
Sources
Also known as GHSA-3vff-m33m-2rqh.