CVE-2025-34217: Vasion Virtual Appliance Application

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers rule granting the printerlogic_ssh group 'NOPASSWD: ALL'. Possession of the matching private key gives an attacker root access to the appliance.

Affected products

• Vasion Virtual Appliance Application: affected versions not specified
• Vasion Virtual Appliance Host: affected versions not specified

Published 2025-09-30. Last modified 2026-06-17.