High severity7.8NVD Advisory· Published Sep 19, 2025· Updated Jun 17, 2026
CVE-2025-34200
CVE-2025-34200
Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to obtain the network account username and password. Using the network account an attacker can change network parameters via the appliance interface, enabling local misconfiguration, network disruption or further escalation depending on deployment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:vasion:virtual_appliance_host:-:*:*:*:*:*:*:*
- (no CPE)range: *
- cpe:2.3:a:vasion:virtual_appliance_application:-:*:*:*:*:*:*:*
- Range: *
Patches
Vulnerability mechanics
References
4- pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.htmlnvdExploitThird Party Advisory
- help.printerlogic.com/saas/Print/Security/Security-Bulletins.htmnvdVendor Advisory
- help.printerlogic.com/va/Print/Security/Security-Bulletins.htmnvdVendor Advisory
- www.vulncheck.com/advisories/vasion-print-printerlogic-network-account-password-stored-in-cleartextnvdThird Party Advisory
News mentions
0No linked articles in our index yet.