DeutschShown in its original language — a full translation is planned for a future version.
Vasion Print: Mehrere Schwachstellen
view advisory published 2025-09-30
Ein Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um sich erhöhte Berechtigungen – sogar Administratorrechte – zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-34217US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/… | ||||
| CVE-2025-34225US | high8.6OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request… | ||||
| CVE-2025-34224US | critical9.1OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts… | ||||
| CVE-2025-34223US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin acco… | ||||
| CVE-2025-34222US | critical9.1OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /… | ||||
| CVE-2025-34221US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker… | ||||
| CVE-2025-34220US | medium5.3OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/ident… | ||||
| CVE-2025-34218US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose internal Docker conta… | ||||
| CVE-2025-34216US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthentica… | ||||
| CVE-2025-34215US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (only VA deployments) expose an unauthenticated fi… | ||||
| CVE-2025-34212US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 (VA/SaaS deployments) possess CI/CD weaknesses: the… | ||||
| CVE-2025-34211US | medium4.9OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL ke… | ||||
| CVE-2025-34209US | high7.2OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GP… | ||||
| CVE-2025-34207US | critical9.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker i… | ||||
02
references
External citations — patches, advisories, analysis.
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan