Vulnerability details

CVE-2025-34201

Vasion Print ApplicationVasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances

CVSS 4.0
8.5High

Official description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services (HTTP, Redis, MySQL, etc.) on the overlay network. From a compromised container, an attacker can reach and exploit other services, enabling lateral movement, data theft, and system-wide compromise.

CVSS scores

ScoreVersionSourceVector
8.5High 4.0 CVEProject cvelistV5 (CNA) (VulnCheck) CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersionsSource
Vasion Print Application All CVEProject cvelistV5 (CNA)
Vasion Print Virtual Appliance Host All CVEProject cvelistV5 (CNA)

References and advisories

4
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-09-19
Last updated
2025-11-18
State
Published
Assigner (CNA)
VulnCheck

Exploit prediction (EPSS)

0.29%
Probability of exploitation in 30 days
22.5%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-653
    Improper Isolation or Compartmentalization