DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Vasion Print: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-09-30
Ein Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um sich erhöhte Berechtigungen – sogar Administratorrechte – zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-34217US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/… | ||||
| CVE-2025-34225US | high8.6OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request… | ||||
| CVE-2025-34224US | critical9.1OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts… | ||||
| CVE-2025-34223US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin acco… | ||||
| CVE-2025-34222US | critical9.1OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /… | ||||
| CVE-2025-34221US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker… | ||||
| CVE-2025-34220US | medium5.3OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/ident… | ||||
| CVE-2025-34218US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose internal Docker conta… | ||||
| CVE-2025-34216US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthentica… | ||||
| CVE-2025-34215US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (only VA deployments) expose an unauthenticated fi… | ||||
| CVE-2025-34212US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 (VA/SaaS deployments) possess CI/CD weaknesses: the… | ||||
| CVE-2025-34211US | medium4.9OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL ke… | ||||
| CVE-2025-34209US | high7.2OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GP… | ||||
| CVE-2025-34207US | critical9.8OT erhöht | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker i… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
- NIST Vulnerability Database vom 2025-09-30external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan