CVE-2025-34201

High

Description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services (HTTP, Redis, MySQL, etc.) on the overlay network. From a compromised container, an attacker can reach and exploit other services, enabling lateral movement, data theft, and system-wide compromise.

SeverityHigh
CVSS7.8
Exploit probability—
ProductVasion Virtual Appliance Application
PublishedSep 19, 2025
First seenSep 19, 2025
Weakness typeCWE-653CWE-653

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
vasion virtual_appliance_applicationNo range specified—
vasion virtual_appliance_hostNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-34201 · Vasion Virtual Appliance Application · Dark Radar