Vasion Print Insufficient Antivirus Protection Vulnerability Allowing Malicious Driver Upload

A vulnerability exists in Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, allowing drivers with known malicious code to be uploaded. This issue stems from inadequate antivirus protection, as the application permits the manual upload of printer drivers by administrators without sufficient checks against malicious content.

Impact

Exploitation of this vulnerability could lead to the installation of malicious printer drivers, potentially allowing for further attacks or exploitation on the affected system.

Remediation

Vasion has addressed this vulnerability in the Vasion Print Virtual Appliance Host 22.0.843 and Application 20.0.1923. Users should update to these versions.