CVE-2025-34190

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (macOS/Linux client deployments) are vulnerable to an authentication bypass in PrinterInstallerClientService. The service requires root privileges for certain administrative operations, but these checks rely on calls to geteuid(). By preloading a malicious shared object overriding geteuid(), a local attacker can trick the service into believing it is running with root privileges. This bypass enables execution of administrative commands (e.g., enabling debug mode, managing configurations, or invoking privileged features) without proper authorization. While some actions requiring write access to protected files may still fail, the flaw effectively breaks the intended security model of the inter-process communication (IPC) system, allowing local attackers to escalate privileges and compromise system integrity. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm	Vendor Advisory
https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm	Vendor Advisory
https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-auth-bypass-printerinstallerclientservice	Exploit Third Party Advisory
https://www.vulncheck.com/advisories/vasion-print-printerlogic-authentication-bypass-via-ld-preload-hooking	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:vasion:virtual_appliance_application:-:::::::*
	cpe:2.3:a:vasion:virtual_appliance_host:-:::::::*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*

History

29 Sep 2025, 20:15

Type	Values Removed	Values Added
Summary	(en) Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (macOS/Linux client deployments) are vulnerable to an authentication bypass in PrinterInstallerClientService. The service requires root privileges for certain administrative operations, but these checks rely on calls to geteuid(). By preloading a malicious shared object overriding geteuid(), a local attacker can trick the service into believing it is running with root privileges. This bypass enables execution of administrative commands (e.g., enabling debug mode, managing configurations, or invoking privileged features) without proper authorization. While some actions requiring write access to protected files may still fail, the flaw effectively breaks the intended security model of the inter-process communication (IPC) system, allowing local attackers to escalate privileges and compromise system integrity. NOTE: This vulnerability has been addressed, but an affected version range is not yet fully determined. We will update this record as soon as the vendor provides confirmed version information.	(en) Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (macOS/Linux client deployments) are vulnerable to an authentication bypass in PrinterInstallerClientService. The service requires root privileges for certain administrative operations, but these checks rely on calls to geteuid(). By preloading a malicious shared object overriding geteuid(), a local attacker can trick the service into believing it is running with root privileges. This bypass enables execution of administrative commands (e.g., enabling debug mode, managing configurations, or invoking privileged features) without proper authorization. While some actions requiring write access to protected files may still fail, the flaw effectively breaks the intended security model of the inter-process communication (IPC) system, allowing local attackers to escalate privileges and compromise system integrity. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.

24 Sep 2025, 19:29

Type	Values Removed	Values Added
CPE		cpe:2.3:a:vasion:virtual_appliance_host:-:::::::* cpe:2.3:o:apple:macos:-:::::::* cpe:2.3:o:linux:linux_kernel:-:::::::* cpe:2.3:a:vasion:virtual_appliance_application:-:::::::*
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8
First Time		Linux linux Kernel Vasion virtual Appliance Host Apple macos Apple Linux Vasion virtual Appliance Application Vasion
References	~~() https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm -~~	() https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - Vendor Advisory
References	~~() https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm -~~	() https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - Vendor Advisory
References	~~() https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-auth-bypass-printerinstallerclientservice -~~	() https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-auth-bypass-printerinstallerclientservice - Exploit, Third Party Advisory
References	~~() https://www.vulncheck.com/advisories/vasion-print-printerlogic-authentication-bypass-via-ld-preload-hooking -~~	() https://www.vulncheck.com/advisories/vasion-print-printerlogic-authentication-bypass-via-ld-preload-hooking - Third Party Advisory

19 Sep 2025, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-09-19 19:15

Updated : 2025-09-29 20:15

NVD link : CVE-2025-34190

Mitre link : CVE-2025-34190

CVE.ORG link : CVE-2025-34190

JSON object : View

Products Affected

linux

linux_kernel

apple

macos

vasion

virtual_appliance_application
virtual_appliance_host

CWE

CWE-306

Missing Authentication for Critical Function

7.8 /10