CVE-2025-34229

🗓️ 29 Sep 2025 20:41:05Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 58 Views🌐 WEB

There is a blind server side forgery in Vasion Print via installApp.php during printer registration, exploitable without authentication.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2025-34229	29 Sep 202520:41	–	attackerkb
CNNVD	Vasion Print Virtual Appliance Host security vulnerability	29 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-34229 Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.php	29 Sep 202520:41	–	cvelist
EUVD	EUVD-2025-31630	3 Oct 202520:07	–	euvd
NVD	CVE-2025-34229	29 Sep 202521:15	–	nvd
osv_cve	CVE-2025-34229	29 Sep 202521:15	–	osv_cve
Positive Technologies	PT-2025-39892	29 Sep 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-34229: Missing Authentication for Critical Function	29 Sep 202500:00	–	rapid7
RedhatCVE	CVE-2025-34229	30 Sep 202520:56	–	redhatcve
Vulnrichment	CVE-2025-34229 Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.php	29 Sep 202520:41	–	vulnrichment

NVD

Vulners

CNA

Node

vasion virtual_appliance_applicationRange<25.1.1413

vasion virtual_appliance_hostRange<25.1.102

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "/var/www/app/console_release/hp/installApp.php"
    ],
    "product": "Print Virtual Appliance Host",
    "vendor": "Vasion",
    "versions": [
      {
        "lessThan": "25.1.102",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "/var/www/app/console_release/hp/installApp.php"
    ],
    "product": "Print Application",
    "vendor": "Vasion",
    "versions": [
      {
        "lessThan": "25.1.1413",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
help	www.help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
help	www.help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
vulncheck	www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-hp-update-php-script
pierrekim	www.pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html

Parameter	Position	Path	Description	CWE
printer_vo->str_host_address	request body	/var/www/app/console_release/hp/installApp.php	Blind SSRF vulnerability where the application takes a printer host address from the request and makes an outbound request to it without validation.	CWE-306, CWE-918

18 Oct 2026 21:10Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.8

CVSS 46.9

EPSS0.00531

SSVC