← Back to browse · API

CVE-2025-34221

Severity
CRITICAL
CVSS
10.0
EPSS
0.01364
Risk score
40.48
CISA KEV
No
PoC
No
Published
2025-09-29
Modified
2026-05-15
First seen
2026-08-07
Aliases
EUVD-2025-31624, GHSA-WCJ6-872M-C4F5
Products
Vasion:Print Application 0 <25.2.1518, Vasion:Print Virtual Appliance Host 0 <25.2.169
Sources
euvd EUVD-2025-31624

Description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because firewall rules allow unrestricted traffic to the Docker bridge network. Because no authentication, ACL or client‑side identifier is required, the attacker can interact with any internal API, bypassing the product’s authentication mechanisms entirely. The result is unauthenticated remote access to internal services, allowing credential theft, configuration manipulation and potential remote code execution. This vulnerability has been identified by the vendor as: V-2025-002 — Authentication Bypass - Docker Instances.

References