CVE-2025-34192

Critical

Description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been end-of-life since 2019 and is no longer supported by the OpenSSL project. Continued use of this outdated cryptographic library exposes deployments to known vulnerabilities that are no longer patched, weakening the overall security posture. Affected daemons may emit deprecation warnings and rely on cryptographic components with unresolved security flaws, potentially enabling attackers to exploit weaknesses in TLS/SSL processing or cryptographic operations. This vulnerability has been identified by the vendor as: V-2023-021 — Out-of-Date OpenSSL Library.

SeverityCritical
CVSS9.8
Exploit probability—
ProductVasion Virtual Appliance Application
PublishedSep 19, 2025
First seenSep 19, 2025
Weakness typeCWE-1104CWE-1104

How to fix

Update
  • vasion virtual_appliance_application20.0.2140 or later
  • vasion virtual_appliance_host22.0.893 or later

Affected products

ProductAffected versionsFixed in
vasion virtual_appliance_applicationv < 20.0.214020.0.2140
vasion virtual_appliance_hostv < 22.0.89322.0.893

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.