Vulnerability in Vasion Print Virtual Appliance Exposes Internal Docker Networks

CVE-2025-34202

What is CVE-2025-34202?

The Vasion Print Virtual Appliance and Application expose Docker internal networks, allowing potential attackers on the same external L2 segment to directly access container IPs. This vulnerability permits interaction with internal services such as HTTP APIs, Redis, and MySQL, many of which lack authentication or have known exploitation paths. Consequently, exploitation of a single accessible endpoint can facilitate lateral movement, remote code execution, data exfiltration, and full system compromise.

References