CVE-2025-34225: CWE-306 Missing Authentication for Critical Function in Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The `console_release` directory is reachable from the internet without any authentication. Inside that directory are dozens of PHP scripts that build URLs from user‑controlled values and then invoke either 'curl_exec()` or `file_get_contents()` without proper validation. Although many files attempt to mitigate SSRF by calling `filter_var', the checks are incomplete. Because the endpoint is unauthenticated, any remote attacker can supply a hostname and cause the server to issue requests to internal resources. This enables internal network reconnaissance, potential pivoting, or data exfiltration. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.
AI Analysis
Technical Summary
The Vasion Print Virtual Appliance Host and Application contain an SSRF vulnerability due to missing authentication on the 'console_release' directory and insufficient validation of user-supplied hostnames in PHP scripts. These scripts use functions like 'curl_exec' and 'file_get_contents' on URLs constructed from user input without complete filtering, allowing unauthenticated attackers to induce the server to make arbitrary HTTP requests to internal systems. This vulnerability is tracked as CVE-2025-34225 with a CVSS 4.0 score of 8.8, indicating high severity. Although the vulnerability is confirmed fixed, no specific patch version or date is provided in the available data.
Potential Impact
An unauthenticated remote attacker can exploit this SSRF vulnerability to perform internal network reconnaissance and potentially pivot within the network or exfiltrate data by causing the vulnerable server to send crafted requests to internal resources. This compromises the confidentiality and potentially the integrity of internal systems accessible from the vulnerable appliance. The vulnerability is rated high severity with a CVSS score of 8.8.
Mitigation Recommendations
The vulnerability has been confirmed as remediated by the vendor, although the exact patch version or date is not specified. Users should upgrade to Vasion Print Virtual Appliance Host version 25.1.102 or later and Application version 25.1.1413 or later to ensure the fix is applied. Until confirmed patched, restrict access to the 'console_release' directory and monitor for unusual internal requests originating from the appliance. Patch status is not yet confirmed with exact version details — check the vendor advisory for current remediation guidance.
CVE-2025-34225: CWE-306 Missing Authentication for Critical Function in Vasion Print Virtual Appliance Host
Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The `console_release` directory is reachable from the internet without any authentication. Inside that directory are dozens of PHP scripts that build URLs from user‑controlled values and then invoke either 'curl_exec()` or `file_get_contents()` without proper validation. Although many files attempt to mitigate SSRF by calling `filter_var', the checks are incomplete. Because the endpoint is unauthenticated, any remote attacker can supply a hostname and cause the server to issue requests to internal resources. This enables internal network reconnaissance, potential pivoting, or data exfiltration. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.
CVSS v4.0
Score 8.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Vasion Print Virtual Appliance Host and Application contain an SSRF vulnerability due to missing authentication on the 'console_release' directory and insufficient validation of user-supplied hostnames in PHP scripts. These scripts use functions like 'curl_exec' and 'file_get_contents' on URLs constructed from user input without complete filtering, allowing unauthenticated attackers to induce the server to make arbitrary HTTP requests to internal systems. This vulnerability is tracked as CVE-2025-34225 with a CVSS 4.0 score of 8.8, indicating high severity. Although the vulnerability is confirmed fixed, no specific patch version or date is provided in the available data.
Potential Impact
An unauthenticated remote attacker can exploit this SSRF vulnerability to perform internal network reconnaissance and potentially pivot within the network or exfiltrate data by causing the vulnerable server to send crafted requests to internal resources. This compromises the confidentiality and potentially the integrity of internal systems accessible from the vulnerable appliance. The vulnerability is rated high severity with a CVSS score of 8.8.
Mitigation Recommendations
The vulnerability has been confirmed as remediated by the vendor, although the exact patch version or date is not specified. Users should upgrade to Vasion Print Virtual Appliance Host version 25.1.102 or later and Application version 25.1.1413 or later to ensure the fix is applied. Until confirmed patched, restrict access to the 'console_release' directory and monitor for unusual internal requests originating from the appliance. Patch status is not yet confirmed with exact version details — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2025-04-15T19:15:22.574Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 68daefb54b0d68cddf56c5fc
Added to database: 09/29/2025, 20:44:37 UTC
Last enriched: 05/16/2026, 09:21:43 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 169
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.