PT-2025-38600 · Unknown+3 · Mysql Server+3

Pierre Barre · Published 2025-09-19 · Updated 2025-09-20 · CVE-2025-34201

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) (affected versions not specified)

Description Vasion Print (formerly PrinterLogic) utilizes Docker containers on shared internal networks lacking firewalling or segmentation between instances. A compromise of a single container grants direct access to internal services, including HTTP, Redis, and MySQL, on the overlay network. This allows an attacker to move laterally, steal data, and potentially compromise the entire system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-653

Related Identifiers

BDU:2026-00321

CVE-2025-34201

Affected Products

Docker

Mysql Server

Redis

Vasion Print

References · 10

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-lack-of-fw · Exploit
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34201 · Security Note
• https://bdu.fstec.ru/vul/2026-00321 · Security Note
• https://twitter.com/CVEnew/status/1969291945852776586 · Twitter Post
• https://twitter.com/CveFindCom/status/1969116918805102685 · Twitter Post
• https://t.me/CVEtracker/32967 · Telegram Post
• https://vulncheck.com/advisories/vasion-print-printerlogic-lack-of-network-segmentation-between-docker-instances · Note
• https://twitter.com/VulmonFeeds/status/1969232927775920322 · Twitter Post