CVE-2025-34194: virtual appliance application Version not applicable in the source CPE; +3 more affected products

Affected technology

virtual appliance application · Version not applicable in the source CPE
vasion

virtual appliance host · Version not applicable in the source CPE
vasion

Print Virtual Appliance Host · 0 to before 25.1.102
Vasion

Print Application · 0 to before 25.1.1413
Vasion

Description’s affected range: versions prior to 25.1.102 and Application versions prior to 25.1.1413 (Windows client deployments) contain an insecure temporary-file handling vulnerability in the PrinterInstallerClient components

Component: PrinterInstallerClient temporary file handling (AppData Local Temp)

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

A local, unprivileged user can overwrite or create files as SYSTEM, leading to local privilege escalation and the ability to modify configuration files, replace or inject binaries, or otherwise compromise confidentiality, integrity, and availability of the system. Vendor/CNA’s CVSS 4.0 assessment (base score 8.5/10) rates confidentiality, integrity and availability impact as high.