Insecure SSH Client Configuration in Vasion Print Virtual Appliance by PrinterLogic

CVE-2025-34207

What is CVE-2025-34207?

The Vasion Print Virtual Appliance and its associated application versions prior to 22.0.1049 and 20.0.2786, respectively, exhibit an insecure SSH client configuration within Docker instances. Key options like 'UserKnownHostsFile=/dev/null', 'StrictHostKeyChecking=no', and 'ForwardAgent yes' are enabled, which compromises the verification process of remote host SSH keys. This configuration allows an attacker to exploit a single compromised container to connect with a malicious SSH server. Consequently, attackers can capture forwarded private keys, enabling them to move laterally and potentially gain unauthorized access across the network environment.

References