Advisories · Technology
Vasion Print Virtual Appliance Host.
Every CVE that names Vasion Print Virtual Appliance Host among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-256
- CVSS 8.2 High
Vasion Print (formerly PrinterLogic) Insecure Password Hashing
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Weak cryptography or TLS
- CWE-759
- CVSS 10.0 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Hard-coded credentials
- CVSS 9.5 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCE
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Weak cryptography or TLS
- CVSS 10.0 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic)
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCE
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Hard-coded credentials
- CVSS 10.0 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- CVSS 6.9 Medium
Vasion Print (formerly PrinterLogic) Unauthenticated API Leaks Group Information
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Information disclosure
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Unrestricted file upload
- CVSS 8.8 High
Vasion Print (formerly PrinterLogic) SSRF via Lexmark update.php
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.php
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Vasion Print (formerly PrinterLogic) Blind SSRF via HP log_off_single_sign_on.php
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Vasion Print (formerly PrinterLogic) SSRF via HP badgeSetup.php
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Vasion Print (formerly PrinterLogic) SSRF via console_release Directory
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Information disclosure
- CVSS 8.5 High
Vasion Print (formerly PrinterLogic) Insecure Use of file_get_contents()
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Server-side request forgery (SSRF)
- CVSS 7.9 High
Vasion Print (formerly PrinterLogic) Insecure SSH Client Configuration
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Hard-coded credentials
- CVSS 10.0 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Insecure Installation Credentials
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Hard-coded credentials
- CVSS 8.7 High
Vasion Print (formerly PrinterLogic) Insecure Build Pipeline
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Broken access control
- CWE-494
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Hard-coded credentials
- CVSS 9.4 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Hardcoded GPG Private Key
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Hard-coded credentials
- CVSS 9.2 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Hardcoded Encryption Private Keys
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Hard-coded credentials
- CVSS 10.0 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Exposed Internal Docker Instance
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- CVSS 6.9 Medium
Vasion Print (formerly PrinterLogic) Blind SSRF via Lexmark dellCheck.php
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Hard-coded credentials
- CVSS 8.5 High
Vasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink Follow
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Path traversal
- Broken access control
- CVSS 8.5 High
Vasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass via LD_PRELOAD Hooking
- Vasion Print Application
- Vasion Print Virtual Appliance Host
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-561
- CVSS 8.7 High
Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-291
- CVSS 6.9 Medium
Vasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session Hijacking
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Broken access control
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions
- Vasion Print Virtual Appliance Host
- Vasion Print Application (SaaS/VA)
- Information disclosure
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Weak cryptography or TLS
- CVSS 7.1 High
Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-755
- CWE-1104
- CVSS 8.5 High
Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-653
- CVSS 8.4 High
Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Information disclosure
- CVSS 8.5 High
Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File Handling
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Path traversal
- CWE-377
- CVSS 8.6 High
Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Information disclosure
- CVSS 8.7 High
Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Privilege escalation
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Hard-coded credentials
- CVSS 8.6 High
Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Hard-coded credentials
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-1104
- CVSS 8.6 High
Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exe
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Unrestricted file upload
- CVSS 9.3 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-1395