CVE-2025-34221: CWE-306 Missing Authentication for Critical Function in Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because firewall rules allow unrestricted traffic to the Docker bridge network. Because no authentication, ACL or client‑side identifier is required, the attacker can interact with any internal API, bypassing the product’s authentication mechanisms entirely. The result is unauthenticated remote access to internal services, allowing credential theft, configuration manipulation and potential remote code execution. This vulnerability has been identified by the vendor as: V-2025-002 — Authentication Bypass - Docker Instances.
AI Analysis
Technical Summary
Vasion Print Virtual Appliance Host and Application versions before 25.2.169 and 25.2.1518 respectively have a missing authentication vulnerability (CWE-306) due to firewall misconfiguration that exposes internal Docker containers to the network without requiring authentication or access controls. This allows attackers to bypass the product’s authentication entirely and interact with internal APIs remotely. The vulnerability can lead to credential theft, unauthorized configuration manipulation, and remote code execution. It is tracked as CVE-2025-34221 with a critical CVSS 4.0 score of 10.0. No official patch or remediation details are provided in the available data.
Potential Impact
The vulnerability allows unauthenticated remote attackers to access internal Docker container APIs, bypassing authentication mechanisms. This can result in theft of credentials, unauthorized changes to system configuration, and potentially remote code execution, severely compromising the affected system's confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the Docker bridge network on affected Vasion Print Virtual Appliance Hosts to prevent unauthorized access. Implement network segmentation and firewall rules to block external access to internal Docker container interfaces. Monitor vendor communications closely for patch releases or official mitigations.
CVE-2025-34221: CWE-306 Missing Authentication for Critical Function in Vasion Print Virtual Appliance Host
Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because firewall rules allow unrestricted traffic to the Docker bridge network. Because no authentication, ACL or client‑side identifier is required, the attacker can interact with any internal API, bypassing the product’s authentication mechanisms entirely. The result is unauthenticated remote access to internal services, allowing credential theft, configuration manipulation and potential remote code execution. This vulnerability has been identified by the vendor as: V-2025-002 — Authentication Bypass - Docker Instances.
CVSS v4.0
Score 10.0critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Vasion Print Virtual Appliance Host and Application versions before 25.2.169 and 25.2.1518 respectively have a missing authentication vulnerability (CWE-306) due to firewall misconfiguration that exposes internal Docker containers to the network without requiring authentication or access controls. This allows attackers to bypass the product’s authentication entirely and interact with internal APIs remotely. The vulnerability can lead to credential theft, unauthorized configuration manipulation, and remote code execution. It is tracked as CVE-2025-34221 with a critical CVSS 4.0 score of 10.0. No official patch or remediation details are provided in the available data.
Potential Impact
The vulnerability allows unauthenticated remote attackers to access internal Docker container APIs, bypassing authentication mechanisms. This can result in theft of credentials, unauthorized changes to system configuration, and potentially remote code execution, severely compromising the affected system's confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the Docker bridge network on affected Vasion Print Virtual Appliance Hosts to prevent unauthorized access. Implement network segmentation and firewall rules to block external access to internal Docker container interfaces. Monitor vendor communications closely for patch releases or official mitigations.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2025-04-15T19:15:22.574Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 68daefb54b0d68cddf56c5e4
Added to database: 09/29/2025, 20:44:37 UTC
Last enriched: 05/16/2026, 09:21:11 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 158
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.