Cyber Posture

CVE-2025-27661

Critical

Published: 05 March 2025

Published
05 March 2025
Modified
01 April 2025
KEV Added
—
Patch
—
CVSS Score 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score 0.0037 58.8th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries can use stolen session cookies to authenticate to web applications and services.

Security Summary

CVE-2025-27661 is a session fixation vulnerability (CWE-384, tracked as OVE-20230524-0004) in Vasion Print, formerly known as PrinterLogic. It affects versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923. The vulnerability was published on 2025-03-05 and carries a CVSS v3.1 base score of 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Unauthenticated attackers can exploit this vulnerability over the network with low attack complexity and without requiring user interaction. Successful exploitation enables high-impact compromise of confidentiality and integrity, allowing attackers to fixate and potentially hijack user sessions.

Mitigation details are available in the vendor's security bulletin at https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm.

Details

CWE(s)
CWE-384

Affected Products

printerlogic
vasion print
≤ 20.0.1923
printerlogic
virtual appliance
≤ 22.0.843

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1550.004 Web Session Cookie Lateral Movement
Adversaries can use stolen session cookies to authenticate to web applications and services.
attack.mitre.org →
Why these techniques?

Session fixation in public-facing web app enables remote unauthenticated exploitation (T1190) and use of forged web session cookies to hijack authenticated sessions (T1550.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References