CVE-2025-34203

CVE-2025-34203

Critical · published September 19, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

🔥 Outdated dependencies lurk in every container! Vasion Print's virtual appliance host is like a house full of leaky pipes — it may look fine from the outside, but things can go terribly wrong inside. ⚡ Picture a restaurant using expired ingredients in multiple dishes. Each dish might individually seem edible, but when combined, they create a recipe for disaster. Similarly, outdated components in these Docker containers increase vulnerability, making it easier for attackers to exploit weaknesses. An attacker could slip in undetected, chain together these vulnerabilities, and wreak havoc. They could access sensitive data, disrupt services, and potentially take control of your printing infrastructure — an absolutely devastating scenario for any organization!

Put simply

Picture a restaurant using expired ingredients in multiple dishes. Each dish might individually seem edible, but when combined, they create a recipe for disaster. Similarly, outdated components in these Docker containers increase vulnerability, making it easier for attackers to exploit weaknesses. This vulnerability arises from multiple Docker containers within Vasion Print that rely on outdated and unsupported components, including EOL versions of Nginx and Laravel. These older libraries introduce critical security risks, creating an expanded attack surface for potential adversaries.

What to do

An attacker could slip in undetected, chain together these vulnerabilities, and wreak havoc. They could access sensitive data, disrupt services, and potentially take control of your printing infrastructure — an absolutely devastating scenario for any organization! Immediately upgrade to Vasion Print Virtual Appliance Host version 22.0.1002 and Application version 20.0.2614 to remove these outdated containers. Regularly audit your systems for unsupported components and ensure all dependencies are up to date. You've got this! With these updates, you can protect your infrastructure and keep those vulnerabilities at bay. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00871 · 58.4th percentile
Published
2025-09-19T23:15Z
Affected products (2)
ProductVersionsFixed in
vasion/virtual_appliance_application< 20.0.261420.0.2614
vasion/virtual_appliance_host< 22.0.100222.0.1002
References (4)
EPSS history
Timeline
  • 19 SEP 18:36Z
    Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components
    cvelistv5