Horizon Alert
Summary of the vulnerability and why it matters
A critical security issue has been identified in Vasion Print's virtual appliance and application. Certain administrative functions related to printer and device management can be accessed and modified by unauthenticated remote attackers. This could potentially allow unauthorized changes to networked device configurations.
- Unauthenticated access to modify devices.
- Critical issue impacting device management functions.
- Confirm relevance and potential exposure.
Attack Path
How an attacker could exploit the issue
An attacker can remotely access unauthenticated PHP scripts on the Vasion Print Virtual Appliance and Application. These scripts allow the attacker to modify networked printer configurations, add or remove RFID badge devices, or change other device settings without needing any credentials. This could allow an attacker to disrupt printing services or gain unauthorized control over connected devices.
- No authentication required for access.
- Invokes PHP scripts to modify devices.
- Allows unauthorized device configuration changes.
Live Threat
Current exploitation, exposure, and threat context
Unauthenticated remote access to configuration scripts could allow an attacker to modify device settings. This could include reconfiguring networked printers, adding or deleting RFID badge devices, or altering other device configurations.
- Device settings could be modified.
- Via unauthenticated remote access.
- Unauthorized changes to network devices.
Operational Fix
Recommended remediation, mitigation, and detection steps
Teams responsible for managing printing infrastructure and connected devices, potentially including application owners, infrastructure teams, and security operations, should triage this vulnerability. The initial step is to identify all instances of the affected Vasion Print technology, determine their network exposure and business criticality, and locate the accountable system owner before planning remediation.
- Identify accountable system owners.
- Verify network reachability and criticality.
- Plan remediation based on exposure.
