Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Vasion Print Application, Print Virtual Appliance Host 20.0.2786, 22.0.1049 Clear all filters
TI-2025-24370 CVE-2025-34224 · GHSA-r2cf-j5w6-4j3c

Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification

Priority HIGH 82

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts under the `console_release` directory wi…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00971 Published 2025-09-29 Fixed in 22.0.1049, 20.0.2786 CWE-306
TI-2025-24368 CVE-2025-34222 · GHSA-hwf3-gh5p-vgr7

Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates

Priority HIGH 82

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /admin/hp/cert_upload, /admin/hp/cert_del…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00519 Published 2025-09-29 Fixed in 22.0.1049, 20.0.2786 CWE-306
TI-2025-24356 CVE-2025-34207 · GHSA-8v7v-hv29-cp2f

Vasion Print (formerly PrinterLogic) Insecure SSH Client Configuration

Priority HIGH 74

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker instances with the following options: `Us…

CVSS 4.0HIGH 7.9 Network No auth No interaction EPSS 0.00665 Published 2025-09-29 Fixed in 22.0.1049, 20.0.2786 CWE-306
TI-2025-24369 CVE-2025-34223 · GHSA-xfch-mq3g-x27h

Vasion Print (formerly PrinterLogic) Insecure Installation Credentials

Priority HIGH 82

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin account and an installation‑time endpoint at…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01225 Published 2025-09-29 Fixed in 22.0.1049, 20.0.2786 CWE-306
TI-2025-24360 CVE-2025-34211 · GHSA-3vff-m33m-2rqh

Vasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys

Priority HIGH 75

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL key and matching public certificate stored…

CVSS 4.0CRITICAL 9.3 Network High privileges No interaction EPSS 0.00393 Published 2025-09-29 Fixed in 22.0.1049, 20.0.2786 CWE-321
TI-2025-24365 CVE-2025-34218 · GHSA-662c-whx5-q24f

Vasion Print (formerly PrinterLogic) Exposed Internal Docker Instance

Priority MEDIUM 51

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose internal Docker containers through the gw Docker instance.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00995 Published 2025-09-29 Fixed in 22.0.1049, 20.0.2786 CWE-306