CVE-2025-34199

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 (VA and SaaS deployments) contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal microservices. In multiple places, the application sets libcurl/PHP transport options such that CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are effectively disabled, and environment variables (for example API_*_VERIFYSSL=false) are used to turn off verification for gateway and microservice endpoints. As a result, the client accepts TLS connections without validating server certificates (and, in some cases, uses clear-text HTTP), permitting on-path attackers to perform man-in-the-middle (MitM) attacks. An attacker able to intercept network traffic between the product and printers or microservices can eavesdrop on and modify sensitive data (including print jobs, configuration, and authentication tokens), inject malicious payloads, or disrupt service. This vulnerability has been identified by the vendor as: V-2024-024 — Insecure Communication to Printers & Microservices.

• CWE-295
• CWE-295

• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htmVendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htmVendor Advisory
• https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-communicationsExploit, Third Party Advisory
• https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-ssl-verification-allows-mitm-attacksThird Party Advisory

Published

Sep 19, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34193Vasion Print (formerly PrinterLogic) Virtual Appliance Host …9.8
• CVE-2025-34194Vasion Print (formerly PrinterLogic) Virtual Appliance Host …7.8
• CVE-2025-34195Vasion Print (formerly PrinterLogic) Virtual Appliance Host …9.8
• CVE-2025-34196Vasion Print (formerly PrinterLogic) Virtual Appliance Host …9.8
• CVE-2025-34197Vasion Print (formerly PrinterLogic) Virtual Appliance Host …7.8
• CVE-2025-34198Vasion Print (formerly PrinterLogic) Virtual Appliance Host …9.8
• CVE-2025-34200Vasion Print (formerly PrinterLogic) Virtual Appliance Host …7.8
• CVE-2025-34201Vasion Print (formerly PrinterLogic) Virtual Appliance Host …7.8
• CVE-2025-34202Vasion Print (formerly PrinterLogic) Virtual Appliance Host …8.8
• CVE-2025-34203Vasion Print (formerly PrinterLogic) Virtual Appliance Host …9.8
• CVE-2025-34204Vasion Print (formerly PrinterLogic) Virtual Appliance Host …9.8
• CVE-2025-34205Vasion Print (formerly PrinterLogic) Virtual Appliance Host …9.8