CVE-2025-34198

🚨 Hardcoded SSH host keys are like giving every guest at a dinner party the same key to your house! 🔥 Just as a single spare key can lead to total chaos at a party, hardcoded SSH host keys let attackers impersonate the appliance across multiple installations. It's like a delivery driver who never checks the recipient's name and simply follows an address that could lead anywhere! An attacker who obtains these shared keys can intercept or decrypt SSH connections, making it possible to launch man-in-the-middle attacks or impersonate administrators. This means an attacker could seize control of your appliances, potentially leaking sensitive data or compromising entire systems! Absolutely devastating!

An attacker who obtains these shared keys can intercept or decrypt SSH connections, making it possible to launch man-in-the-middle attacks or impersonate administrators. This means an attacker could seize control of your appliances, potentially leaking sensitive data or compromising entire systems! Absolutely devastating! Immediate action is required: upgrade all installations to versions 22.0.951 or higher for Vasion Print Virtual Appliance Host and 20.0.2368 or higher for the Application. Additionally, generate unique SSH host keys for each appliance to prevent impersonation attacks. Don't delay! You've got this! Follow these steps, and you'll have your appliances secured in no time! 🛡️