CVE-2025-342039.3CriticalCWE-1395

CVE-2025-34203: Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components

Vasion · Print Virtual Appliance Host

Vendor fix available · Affected: Vasion Print Virtual Appliance Host · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.9%probability of exploitation in the next 30 days

59th percentile

050100

Higher than 59% of scored CVEs

9.3CriticalCVSS 4.0

LowMediumHighCrit.

DescriptionCVE.org

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 (VA and SaaS deployments) contain multiple Docker containers that include outdated, end-of-life, unsupported, or otherwise vulnerable third-party components (examples: Nginx 1.17.x, OpenSSL 1.1.1d, various EOL Alpine/Debian/Ubuntu base images, and EOL Laravel/PHP libraries). These components are present across many container images and increase the product's attack surface, enabling exploitation chains when leveraged by an attacker. Multiple distinct EOL versions and unpatched libraries across containers; Nginx binaries date from 2019 in several images and Laravel versions observed include EOL releases (for example Laravel 5.5.x, 5.7.x, 5.8.x). This vulnerability has been identified by the vendor as: V-2024-014 — Outdated Dependencies.

Affected products2

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Vasion · Print Virtual Appliance Hostbefore 22.0.1002
Vasion · Print Applicationbefore 20.0.2614

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Dependency on Vulnerable Third-Party Component · Supply Chain and Malicious Code
Vendor: Vasion
Published: September 2025
Band: Unlikely (under 1%), September 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-34203 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.