The vulnerability CVE-2025-34202 affects Vasion Print Virtual Appliance Host and Application versions prior to 25.2.169 and 25.2.1518. It arises from the exposure of Docker internal networks, allowing attackers on the same external Layer 2 segment or those who can add routes via the appliance gateway to reach container IP addresses directly. This access bypasses intended network isolation, exposing internal services such as HTTP APIs, Redis, and MySQL. Many of these services are either unauthenticated or vulnerable to known exploits. The flaw is classified under CWE-291, indicating reliance on IP address for authentication, which is insufficient. The vulnerability enables attackers to perform lateral movement, remote code execution, data exfiltration, and potentially full system compromise. The CVSS 4.0 base score is 8.7, reflecting high severity with attack vector as adjacent network and no required privileges or user interaction.

Successful exploitation allows an attacker on the same external Layer 2 network segment or with routing capabilities through the appliance to access internal Docker container services directly. This can lead to unauthorized access to unauthenticated or vulnerable services, enabling lateral movement within the environment, remote code execution, data theft, and complete system compromise. The high CVSS score (8.7) indicates significant impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict network access to the appliance to trusted segments only and prevent untrusted users from being on the same Layer 2 network or from adding routes through the appliance. Monitor vendor communications closely for updates and apply official patches or mitigations as soon as they become available.