{"id":"CVE-2025-34200","state":"PUBLISHED","title":"Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext","description":"Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments)  provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to obtain the network account username and password. Using the network account an attacker can change network parameters via the appliance interface, enabling local misconfiguration, network disruption or further escalation depending on deployment.","publishedAt":"2025-09-19T18:45:41.248Z","updatedAt":"2025-11-17T23:56:32.928Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Vasion Print Virtual Appliance Host","Vasion Print Application"],"affected":[{"vendor":"Vasion","product":"Print Virtual Appliance Host","defaultStatus":"unknown","versions":[{"version":"*","status":"affected","versionType":"semver"}],"modules":["Appliance OS default /etc/issue provisioning and network account configuration"]},{"vendor":"Vasion","product":"Print Application","defaultStatus":"unknown","versions":[{"version":"*","status":"affected","versionType":"semver"}],"modules":["Appliance OS default /etc/issue provisioning and network account configuration"]}],"references":["https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-clear-text-password","https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm","https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm","https://www.vulncheck.com/advisories/vasion-print-printerlogic-network-account-password-stored-in-cleartext"],"weaknesses":["CWE-312"],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/34xxx/CVE-2025-34200.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-34200","state":"PUBLISHED","datePublished":"2025-09-19T18:45:41.248Z","dateUpdated":"2025-11-17T23:56:32.928Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2025-04-15T19:15:22.570Z"},"containers":{"cna":{"title":"Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext","descriptions":[{"lang":"en","value":"Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments)  provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to obtain the network account username and password. Using the network account an attacker can change network parameters via the appliance interface, enabling local misconfiguration, network disruption or further escalation depending on deployment."}],"affected":[{"vendor":"Vasion","product":"Print Virtual Appliance Host","defaultStatus":"unknown","versions":[{"version":"*","status":"affected","versionType":"semver"}],"modules":["Appliance OS default /etc/issue provisioning and network account configuration"]},{"vendor":"Vasion","product":"Print Application","defaultStatus":"unknown","versions":[{"version":"*","status":"affected","versionType":"semver"}],"modules":["Appliance OS default /etc/issue provisioning and network account configuration"]}],"references":[{"url":"https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-clear-text-password","tags":["technical-description"]},{"url":"https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm","tags":["product"]},{"url":"https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/vasion-print-printerlogic-network-account-password-stored-in-cleartext","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.6,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-312","description":"CWE-312 Cleartext Storage of Sensitive Information","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2025-11-17T23:56:32.928Z"},"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:*"}]}]},{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","type":"finder","value":"Pierre Barre"}],"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-19T20:05:30.171844Z","id":"CVE-2025-34200","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-19T20:05:40.367Z"}}]}}}