CVE-2025-34202
CVE-2025-34202 is a high-severity vulnerability in Vasion Virtual Appliance Application with a CVSS 3.x base score of 8.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-291.
Key facts
- Severity: High (CVSS 3.x base score 8.8)
- CVSS v4: 8.7
- EPSS exploit prediction: 1% (56th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-30258
- Weakness: CWE-291
- Affected product: Vasion Virtual Appliance Application
- Published:
- Last modified:
Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a gateway — to reach container IPs directly. This grants access to internal services (HTTP APIs, Redis, MySQL, etc.) that are intended to be isolated inside the container network. Many of those services are accessible without authentication or are vulnerable to known exploitation chains. As a result, compromise of a single reachable endpoint or basic network access can enable lateral movement, remote code execution, data exfiltration, and full system compromise. This vulnerability has been identified by the vendor as: V-2025-003 — Insecure Access to Docker Instance from WAN.
Frequently asked questions
- What is CVE-2025-34202?
- Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a gateway — to reach container IPs directly. This grants access to internal services (HTTP APIs, Redis, MySQL, etc.) that are intended to be isolated inside the container network. Many of those services are accessible without authentication or are vulnerable to known exploitation chains. As a result, compromise of a single reachable endpoint or basic network access can enable lateral movement, remote code execution, data exfiltration, and full system compromise. This vulnerability has been identified by the vendor as: V-2025-003 — Insecure Access to Docker Instance from WAN.
- How severe is CVE-2025-34202?
- CVE-2025-34202 has a CVSS 3.x base score of 8.8, rated high severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2025-34202 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (56th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-34202?
- CVE-2025-34202 primarily affects Vasion Virtual Appliance Application. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2025-34202?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- Does CVE-2025-34202 have an EU (EUVD) identifier?
- Yes. CVE-2025-34202 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-30258.
- When was CVE-2025-34202 published?
- CVE-2025-34202 was published on 2025-09-19 and last updated on 2026-06-17.
References
- https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
- https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
- https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-access-docker-instances-from-wan
- https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-access-to-docker-instances-wan
Affected products (2)
- cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:*
- cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:*
More vulnerabilities in Vasion Virtual Appliance Application
- CVE-2025-34217 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an…
- CVE-2025-34223 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to…
- CVE-2025-34221 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version…
- CVE-2025-34218 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to…
- CVE-2025-34216 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to…
- CVE-2025-34215 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version…
All CVEs affecting Vasion Virtual Appliance Application →
Other CWE-291 vulnerabilities
- CVE-2025-66602 — Critical (CVSS 9.8): A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server…
- CVE-2022-46415 — Critical (CVSS 9.1): DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP…
- CVE-2024-23309 — Critical (CVSS 9.0): The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application…
- CVE-2025-59101 — High (CVSS 7.7): Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has…
- CVE-2026-3690 — High (CVSS 7.4): OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass…
- CVE-2023-35906 — Medium (CVSS 5.3): IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM…