Vasion Print Insufficient Signature Validation Vulnerability

An insufficient signature validation vulnerability has been identified in Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923. This vulnerability allows drivers to be uploaded without proper cryptographic signatures from a trusted authority, potentially leading to the installation of malicious content.

Impact

Exploitation of this vulnerability could allow the upload of unsigned printer drivers, which could be used to distribute malicious content or escalate privileges by impersonating a device.

Remediation

Users can update to Vasion Print, Virtual Appliance Host v22.0.843 / Application v20.0.1923 to address this vulnerability.