The Vasion Print Virtual Appliance Host contains an SSRF vulnerability in the `/var/www/app/console_release/lexmark/update.php` script, which is accessible without authentication. The script uses user-supplied hostnames to build URLs and performs HTTP requests via `curl_exec()` or `file_get_contents()` without validating the input. This allows remote attackers to cause the server to send requests to internal network resources, potentially leading to internal reconnaissance and further attacks. The issue affects versions prior to 25.1.102 (host) and 25.1.1413 (application). Although the patch version is not specified, the vulnerability is confirmed fixed.

An unauthenticated remote attacker can exploit this SSRF vulnerability to make the server issue requests to internal network resources. This can lead to internal network reconnaissance, which may facilitate further attacks such as lateral movement or data exfiltration. The CVSS 4.0 score is 8.8 (high), reflecting the network attack vector, no required privileges or user interaction, and high impact on confidentiality.

The vulnerability has been confirmed as remediated by the vendor, although the exact patched version is not specified. Users should upgrade to version 25.1.102 or later for the Virtual Appliance Host and 25.1.1413 or later for the Application to ensure the fix is applied. Until upgraded, restrict external access to the vulnerable script if possible. Patch status is not yet confirmed with a specific version, so check the vendor advisory for the latest remediation guidance.