CVE-2025-34201CWE-653

CVE-2025-34201

High · published September 19, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services (HTTP, Redis, MySQL, etc.) on the overlay network. From a compromised container, an attacker can reach and exploit other services, enabling lateral movement, data theft, and system-wide compromise.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Weakness
CWE-653 · Improper Isolation or Compartmentalization
Published
2025-09-19T23:15Z
Affected products (2)
ProductVersionsFixed in
vasion/virtual_appliance_applicationall versions—
vasion/virtual_appliance_hostall versions—
References (4)
EPSS history
Timeline
  • 19 SEP 18:47Z
    Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances
    cvelistv5