CVE-2025-34205
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-19

Last updated on: 2025-10-02

Assigner: VulnCheck

Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php (found in several containers) lacks authentication checks and, when executed, performs a SQL update that sets the database administrator username to 'root' and its password hash to the SHA-512 hash of the string 'password'. Separately, commented-out code in /var/www/app/lib/common/oses.php would unserialize session data (unserialize($_SESSION['osdata']))—a pattern that can enable remote code execution if re-enabled or reached with attacker-controlled serialized data. An attacker able to reach the resetroot.php endpoint can trivially reset the MySQL root password and obtain full database control; combined with deserialization issues this can lead to full remote code execution and system compromise. This vulnerability has been identified by the vendor as: V-2023-003 — Dead / Insecure PHP Code.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-19
Last Modified
2025-10-02
Generated
2026-05-07
AI Q&A
2025-09-19
EPSS Evaluated
2026-05-05
NVD
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
vasion virtual_appliance_application to 20.0.1923 (exc)
vasion virtual_appliance_host to 22.0.843 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-561 The product contains dead code, which can never be executed.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

CVE-2025-34205 is a critical vulnerability in Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application versions prior to certain releases. It involves dangerous PHP dead code present in multiple Docker-hosted PHP instances. Specifically, a script named resetroot.php lacks authentication and allows an attacker to reset the MySQL root password to a known value, gaining full database control. Additionally, commented-out code could enable remote code execution if re-enabled or exploited. This combination allows an attacker to execute arbitrary code remotely and fully compromise the system without any authentication or user interaction. [1]


How can this vulnerability impact me? :

This vulnerability can have severe impacts including full compromise of the affected system. An attacker can reset the database administrator password, gain full control over the database, and potentially execute arbitrary code remotely. This leads to complete system compromise, risking confidentiality, integrity, and availability of data and services. [1]


How can this vulnerability be detected on my network or system? Can you suggest some commands?

You can detect this vulnerability by checking if your system is running Vasion Print Virtual Appliance Host versions prior to 22.0.843 or Application versions prior to 20.0.1923. Additionally, you can verify the presence of the /var/www/app/resetroot.php script in Docker-hosted PHP instances. A practical command to check for the vulnerable resetroot.php file on the system would be: `find /var/www/app/ -name resetroot.php`. Network detection could involve scanning for accessible resetroot.php endpoints on the appliance's IP addresses or domains. However, no specific detection commands are provided in the resources. [1]


What immediate steps should I take to mitigate this vulnerability?

Immediate mitigation steps include upgrading Vasion Print Virtual Appliance Host to version 22.0.843 or later and the Application to version 20.0.1923 or later, as these versions address the vulnerability. Additionally, restrict network access to the resetroot.php endpoint to prevent unauthorized execution. If upgrading is not immediately possible, consider removing or disabling the resetroot.php script and auditing Docker containers for the presence of dangerous PHP dead code. Monitoring and blocking unauthorized access attempts to the vulnerable endpoints is also recommended. [1]


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart