PT-2025-39886 · Printerlogic · Vasion Print Application+1

Pierre Barre · Published 2025-09-29 · Updated 2025-09-30 · CVE-2025-34221

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Vasion Print versions prior to 25.2.169 Vasion Print Application versions prior to 25.2.1518

Description Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application deployments expose internal Docker containers to the network due to permissive firewall rules allowing unrestricted traffic to the Docker bridge network. No authentication, access control lists, or client-side identification is required to interact with internal APIs, effectively bypassing the product’s authentication mechanisms. This results in unauthenticated remote access to internal services, potentially enabling credential theft, configuration manipulation, and remote code execution. The vendor has identified this as V-2025-002 — Authentication Bypass - Docker Instances.

Recommendations Update Vasion Print Virtual Appliance Host to version 25.2.169 or later. Update Vasion Print Application to version 25.2.1518 or later.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-34221

Affected Products

Vasion Print

Vasion Print Application

References · 8

• 🔥 https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-auth-bypass · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34221 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34221 · Vendor Advisory
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1972771749256130743 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1972854084173455387 · Twitter Post
• https://vulncheck.com/advisories/vasion-print-printerlogic-unrestriced-access-to-docker-bridge-network · Note
• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm · Patch, Vendor Advisory