CVE-2025-34204

Katalog CVE

CVSS 9.8 · Critical EPSS 0,69%

Kerentanan Improper Privilege Management pada vasion virtual appliance application, vasion virtual appliance host. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise when a container is breached.

Rincian

Terbit di NVD

19 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,69% peluang dieksploitasi; lebih tinggi dari 51,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm advisory vendor
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm advisory vendor
• https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-processes-running-a... exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/vasion-print-printerlogic-processes-running-as-root-inside-docker-instanc... advisory pihak ketiga