Dashboard / CVE-2025-34200

CVE-2025-34200

HIGH
MEDIUM Priority: 0.03 BB Relevance: 52/100
Published: 2025-09-19 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: High
VA: Low

Description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to obtain the network account username and password. Using the network account an attacker can change network parameters via the appliance interface, enabling local misconfiguration, network disruption or further escalation depending on deployment.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
vasion virtual_appliance_application -
vasion virtual_appliance_host -

References & Advisories (4)

Bug Bounty Relevance

52 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.6 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.35%
Raw Score 0.003500
Percentile 29.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00350
2026-11-12
0.00350
2026-11-10
0.00350
2026-11-09
0.00350
2026-11-08
0.00350
2026-11-07
0.00350

Intelligence Sources

nvd ref →

External Links