Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014.
The error classified as CWE-347 (Improper Verification of Cryptographic Signature) means that the application does not properly verify cryptographic signatures of provided data or components. An attacker can supply unsigned or forged data/packets that the system incorrectly treats as trusted and processes. The network attack vector (AV:N) without authentication requirements (PR:N) and user interaction (UI:N) makes this vulnerability exceptionally easy to exploit remotely.
An attacker can gain full control over the vulnerable system — compromise data confidentiality, modify configuration or data (integrity breach), and cause service unavailability. Remote execution of unauthorized operations without any privileges is possible.
Vasion Print should be updated to Virtual Appliance Host version 22.0.843 or later and Application version 20.0.1923 or later. Detailed information is available in the manufacturer's security bulletin at https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
Vasion Print (formerly PrinterLogic) in Virtual Appliance Host version below 22.0.843 and Application version below 20.0.1923.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPrinterlogic Vasion Print
APPPrinterlogic< 20.0.1923Printerlogic Virtual Appliance
APPPrinterlogic< 22.0.843
Related vulnerabilities
Vasion Print / PrinterLogic — nieautoryzowana edycja pakietów sterowników
Hardcoded Password w Vasion Print (PrinterLogic) — dostęp bez uwierzytelnienia
Vasion Print / PrinterLogic — pominięcie uwierzytelnienia w API Single Sign-On
SQL Injection w Vasion Print (PrinterLogic) — zdalne przejęcie kontroli
Zakodowany na stałe klucz AWS API w Vasion Print (PrinterLogic)