CVE-2025-34207: falha de alta gravidade em Vasion Print Application
Vasion Print (formerly PrinterLogic) Insecure SSH Client Configuration
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.9epss 0.7%
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker instances with the following options: `UserKnownHostsFile=/dev/null`, `StrictHostKeyChecking=no`, and `ForwardAgent yes`. These settings disable verification of the remote host’s SSH key and automatically forward the developer’s SSH‑agent to any host that matches the configured wildcard patterns. As a result, an attacker who can reach a single compromised container can cause the container to connect to a malicious SSH server, capture the forwarded private keys, and use those keys for unrestricted lateral movement across the environment. This vulnerability has been identified by the vendor as: V-2024-027 — Insecure Secure Shell (SSH) Configuration.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L
CVEs relacionadas — Vasion Print Application
No mesmo produto, das mais perigosas para as menos.
CVE-2025-34205CRITICALVasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCEEPSS 1.5%CVE-2025-34221CRITICALVasion Print (formerly PrinterLogic)EPSS 1.5%CVE-2025-34223CRITICALVasion Print (formerly PrinterLogic) Insecure Installation CredentialsEPSS 1.2%CVE-2025-34215CRITICALVasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCEEPSS 1.1%CVE-2025-34218CRITICALVasion Print (formerly PrinterLogic) Exposed Internal Docker InstanceEPSS 1.0%CVE-2025-34202HIGHVasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WANEPSS 1.0%
Referências
https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htmhttps://help.printerlogic.com/va/Print/Security/Security-Bulletins.htmhttps://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-ssh-confighttps://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-ssh-client-config