Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2025-34192: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application version

60
This week
CRITICAL 9.8REMOTEUPGRADEUPGRADE

CVE-2025-34192 is a critical-severity flaw (CVSS 9.8) affecting virtual appliance application, virtual appliance host. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been end-of-life since 2019 and is no longer supported by the OpenSSL project. Continued use of this outdated cryptographic library exposes deployments to known vulnerabilities that are no longer patched, weakening th

Why this priority

  • Critical severity
  • Public exploit reference
  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score9.8 (Critical)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance1.0% (top 38%)
CISA exploited listNo
WeaknessCWE-1104
Published2025-09-19
Last modified2026-10-18
Publisher (CNA): VulnCheck · Vendor: vasion

Share: LinkedIn · X · Reddit

Last updated 2026-10-18 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

vasion virtual appliance application UPGRADE
Affected: < 20.0.2140
Fixed in: 20.0.2140
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy virtual-appliance-application || rpm -q virtual-appliance-application || virtual-appliance-application --version
2. UPGRADE to 20.0.2140 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade virtual-appliance-application
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade virtual-appliance-application
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
vasion virtual appliance host UPGRADE
Affected: < 22.0.893
Fixed in: 22.0.893
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy virtual-appliance-host || rpm -q virtual-appliance-host || virtual-appliance-host --version
2. UPGRADE to 22.0.893 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade virtual-appliance-host
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade virtual-appliance-host
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Exact fixes by distribution

Fedora 46 · wordpress · FIXED · 7.1.4-1.fc46 · FEDORA-2026-907394725e · source
sudo dnf upgrade --advisory=FEDORA-2026-907394725e
Fedora ELN · rhc · FIXED · 0.3.15-1.eln159 · FEDORA-2026-1cd9f35750 · source
sudo dnf upgrade --advisory=FEDORA-2026-1cd9f35750

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-34192?

virtual appliance application: upgrade to 20.0.2140; virtual appliance host: upgrade to 22.0.893. Exact commands for each OS are on this page.

Is CVE-2025-34192 being exploited?

CVE-2025-34192 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-34192 affect?

CVE-2025-34192 affects virtual appliance application, virtual appliance host. Severity is critical (CVSS 9.8). Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been en

How urgent is CVE-2025-34192?

Priority 60/100. Critical severity; Public exploit reference; Remotely exploitable, no login, no user action

Software pages

OpenSSL vulnerabilities · macOS vulnerabilities

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.