Executive Summary

CVE-2025-34200 is a vulnerability in Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application where network account credentials are stored in clear-text inside the /etc/issue file, which is world-readable by default. An attacker with local shell access can read this file to obtain the network account username and password. With these credentials, the attacker can change network parameters via the appliance interface, potentially causing local misconfiguration, network disruption, or further escalation depending on the deployment. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with local access to obtain network account credentials in clear-text, enabling them to modify network parameters through the appliance interface. This can lead to local misconfiguration, network disruption, or further escalation of privileges depending on the deployment. The impact includes high confidentiality and integrity risks, potentially allowing attackers to disrupt network operations or gain further control over the system. [1]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking if the file /etc/issue on the Vasion Print Virtual Appliance Host contains network account credentials in cleartext and if the file permissions allow world-readable access. You can use commands such as `cat /etc/issue` to view the contents and `ls -l /etc/issue` to check the file permissions. If the file contains sensitive credentials and is world-readable, the system is vulnerable. [1, 2]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include applying all available security patches from the vendor, restricting access to the /etc/issue file to prevent unauthorized reading (e.g., changing file permissions), implementing network segmentation to limit exposure of Vasion Print components, reviewing and remediating insecure configurations especially related to Docker and cryptographic key management, and enhancing authentication and access control mechanisms to prevent unauthorized access to the appliance interface. [2]

Useful 0 Not Useful 0