CNNVD-202509-4345 Information
CNNVD ID
CNNVD-202509-4345
Related CVE
- CNNVD Published: 2025-09-29
Description (Chinese)
Vasion Print Virtual Appliance Host是美国Vasion公司的一个打印管理软件。 Vasion Print Virtual Appliance Host 25.1.102之前版本存在安全漏洞,该漏洞源于未对$printer_vo->str_host_address变量进行验证或过滤,可能导致服务器端请求伪造攻击。
Description (English)
Vasion Print Virgin Application Host is a print management software for Vasion in the United States. Prior to the version of Vasion Print Mutual Application Host 25.1.102, there was a security loophole, which stemmed from the failure to verify or filter the $[printer vo->str host adress variable, which could lead to a server-side request for a false attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Vasion
Published
2025-09-29
Last Modified
2026-02-24
References
https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-05 https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-hp-update-php-script
Patch
https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
Share on: