{"id":"CVE-2023-32232","aliases":["EUVD-2023-36490","GHSA-4mq4-7fv7-xw62"],"status":"published","title":"An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During...","description":"An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00951,"percentile":0.61531,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-07-25T00:00:00Z","modified":"2026-06-17T05:58:22Z","products":[{"vendor":"vasion","product":"printerlogic_client"}],"references":[{"url":"https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm","tags":["x_transferred","Release Notes"]},{"url":"https://www.vasion.com/press-releases/printerlogic-rebrands","tags":["x_transferred","Broken Link","Vendor Advisory"]},{"url":"https://docs.printercloud.com/1-Printerlogic/Release_Notes/Security_Bulletin_CVE.htm","tags":["x_transferred","Release Notes"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32232"},{"url":"https://github.com/advisories/GHSA-4mq4-7fv7-xw62"}],"sources":{"cve":[{"id":"CVE-2023-32232","description":"An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).","status":"published","published":"2023-07-25T00:00:00Z","modified":"2024-10-24T14:38:38.385Z","updated_at":"2026-11-02T14:35:29.01154Z"}],"euvd":[{"id":"EUVD-2023-36490","description":"An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).","status":"published","published":"2023-07-25T00:00:00Z","modified":"2024-10-24T14:38:38Z","updated_at":"2026-11-03T00:05:20.595169Z"}],"ghsa":[{"id":"GHSA-4mq4-7fv7-xw62","title":"An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During...","description":"An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).","status":"published","published":"2023-07-25T03:30:22Z","modified":"2024-04-04T06:20:37Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:56:41.519501Z"}],"nvd":[{"id":"CVE-2023-32232","description":"An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).","status":"published","published":"2023-07-25T01:15:09.177Z","modified":"2026-06-17T05:58:22.127Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"updated_at":"2026-11-02T14:08:18.687088Z"}]}}