by Kastro
Paper/Archive/CVE-2025-34204

CVE-2025-34204

Vasion Print Virtual Appliance Host — Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.8.528 × 2010.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise when a container is breached.

Affected

ProductAffectedFixed inSource
Print Virtual Appliance Hostall versions–CNA
Print Applicationall versions–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

writeuppierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-processes-running-as-rootrefhelp.printerlogic.com/saas/Print/Security/Security-Bulletins.htmrefhelp.printerlogic.com/va/Print/Security/Security-Bulletins.htmwriteupvulncheck.com/advisories/vasion-print-printerlogic-processes-running-as-root-inside-docker-instances