Vasion
Vasion Virtual Appliance Application: vulnerabilidades y CVE
Vasion Virtual Appliance Application tiene 43 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 20 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE43
Últimos 12 meses0
Críticas20
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-34210 | Crítica (9.4) | 0.16% | — | 2 oct 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store a large number of sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin… |
| CVE-2025-34208 | Alta (8.2) | 0.44% | — | 2 oct 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's… |
| CVE-2025-34217 | Crítica (10) | 0.75% | — | 30 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers… |
| CVE-2025-34235 | Crítica (9.5) | 0.47% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry key that can be enabled by administrators,… |
| CVE-2025-34234 | Crítica (9.2) | 0.41% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain two hardcoded private keys that are shipped in the… |
| CVE-2025-34233 | Alta (8.5) | 0.59% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanism failure vulnerability within the… |
| CVE-2025-34232 | Media (6.9) | 0.55% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability… |
| CVE-2025-34231 | Alta (8.8) | 0.74% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blind server-side request forgery (SSRF)… |
| CVE-2025-34230 | Media (6.9) | 0.53% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability… |
| CVE-2025-34229 | Media (6.9) | 0.53% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability… |
| CVE-2025-34228 | Alta (8.8) | 0.78% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The… |
| CVE-2025-34225 | Alta (8.8) | 0.81% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The… |
| CVE-2025-34224 | Crítica (10) | 0.97% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts under the `console_release` directory… |
| CVE-2025-34223 | Crítica (10) | 1.2% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin account and an installation‑time endpoint… |
| CVE-2025-34222 | Crítica (10) | 0.52% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /admin/hp/cert_upload,… |
| CVE-2025-34221 | Crítica (10) | 1.5% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because… |
| CVE-2025-34220 | Media (6.9) | 0.69% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/identity/search-groups endpoint that does… |
| CVE-2025-34218 | Crítica (10) | 1.00% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose internal Docker containers through the gw Docker instance.… |
| CVE-2025-34216 | Crítica (10) | 0.81% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthenticated REST API endpoints that return… |
| CVE-2025-34215 | Crítica (9.4) | 1.1% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (only VA deployments) expose an unauthenticated firmware-upload flow: a public page… |
| CVE-2025-34212 | Alta (8.7) | 0.67% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 (VA/SaaS deployments) possess CI/CD weaknesses: the build pulls an unverified third-party… |
| CVE-2025-34211 | Crítica (9.3) | 0.39% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL key and matching public certificate… |
| CVE-2025-34209 | Crítica (9.4) | 0.70% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GPG key and passphrase for the account… |
| CVE-2025-34207 | Alta (7.9) | 0.66% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker instances with the following options:… |
| CVE-2025-34196 | Crítica (9.3) | 0.48% | — | 29 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private key for the PrinterLogic Certificate… |
| CVE-2025-34206 | Crítica (9.3) | 0.51% | — | 19 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) mount host configuration and secret material under /var/www/efs_storage into many Docker containers with… |
| CVE-2025-34205 | Crítica (9.3) | 1.4% | — | 19 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP… |
| CVE-2025-34204 | Alta (8.7) | 0.68% | — | 19 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers… |
| CVE-2025-34203 | Crítica (9.3) | 0.87% | — | 19 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 (VA and SaaS deployments) contain multiple Docker containers that include outdated,… |
| CVE-2025-34202 | Alta (8.7) | 0.98% | — | 19 sept 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way that allows an attacker on the same… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.