Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-34199 State: PUBLISHED Published: 2025-09-19T18:48:05.124Z Last Updated: 2025-11-17T23:56:32.752Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-319 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 (VA and SaaS deployments) contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal microservices. In multiple places, the application sets libcurl/PHP transport options such that CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are effectively disabled, and environ
/PHP transport options such that CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are effectively disabled, and environment variables (for example API_*_VERIFYSSL=false) are used to turn off verification for gateway and microservice endpoints. As a result, the client accepts TLS connections without validating server certificates (and, in some cases, uses clear-text HTTP), permitting on-path attackers to perform man-in-the-middle (MitM) attacks. An attacker able to intercept network traffic between the product and printers or microservices can eavesdrop on and modify sensitive data (including print jobs, configuration, and authentication tokens), inject malicious payloads, or disrupt service
ive data (including print jobs, configuration, and authentication tokens), inject malicious payloads, or disrupt service. This vulnerability has been identified by the vendor as: V-2024-024 — Insecure Communication to Printers & Microservices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-communications - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-ssl-verification-allows-mitm-attacks
CVE ID: CVE-2025-34200 State: PUBLISHED Published: 2025-09-19T18:45:41.248Z Last Updated: 2025-11-17T23:56:32.928Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-312 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to obtain the network account username and password. Using the network account an attacker can change network parameters via the appliance interface, enabling local misconfiguratio
he network account an attacker can change network parameters via the appliance interface, enabling local misconfiguration, network disruption or further escalation depending on deployment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-clear-text-password - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-network-account-password-stored-in-cleartext
CVE ID: CVE-2025-34201 State: PUBLISHED Published: 2025-09-19T18:47:07.728Z Last Updated: 2025-11-17T23:56:33.115Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-653 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services (HTTP, Redis, MySQL, etc.) on the overlay network. From a compromised container, an attacker can reach and exploit other services, enabling lateral movement, data theft, and system-wid
mised container, an attacker can reach and exploit other services, enabling lateral movement, data theft, and system-wide compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-lack-of-fw - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-lack-of-network-segmentation-between-docker-instances
CVE ID: CVE-2025-34202 State: PUBLISHED Published: 2025-09-19T18:50:09.021Z Last Updated: 2025-11-17T23:56:33.277Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-291 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a gateway — to reach container IPs directly. This grants access to internal services (HTTP APIs, Redis, MySQL, etc.) that are intended to be isolated inside the container network.
ess to internal services (HTTP APIs, Redis, MySQL, etc.) that are intended to be isolated inside the container network. Many of those services are accessible without authentication or are vulnerable to known exploitation chains. As a result, compromise of a single reachable endpoint or basic network access can enable lateral movement, remote code execution, data exfiltration, and full system compromise. This vulnerability has been identified by the vendor as: V-2025-003 — Insecure Access to Docker Instance from WAN. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-access-docker
ces: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-access-docker-instances-from-wan - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-access-to-docker-instances-wan
CVE ID: CVE-2025-34203 State: PUBLISHED Published: 2025-09-19T18:36:46.154Z Last Updated: 2025-11-17T23:56:33.448Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-1395 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 (VA and SaaS deployments) contain multiple Docker containers that include outdated, end-of-life, unsupported, or otherwise vulnerable third-party components (examples: Nginx 1.17.x, OpenSSL 1.1.1d, various EOL Alpine/Debian/Ubuntu base images, and EOL Laravel/PHP libraries). These components are present across many container images and incr
n/Ubuntu base images, and EOL Laravel/PHP libraries). These components are present across many container images and increase the product's attack surface, enabling exploitation chains when leveraged by an attacker. Multiple distinct EOL versions and unpatched libraries across containers; Nginx binaries date from 2019 in several images and Laravel versions observed include EOL releases (for example Laravel 5.5.x, 5.7.x, 5.8.x). This vulnerability has been identified by the vendor as: V-2024-014 — Outdated Dependencies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/202
ences: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-outdated-components - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-use-of-outdated-eol-vulnerable-third-party-components
CVE ID: CVE-2025-34204 State: PUBLISHED Published: 2025-09-19T18:41:02.997Z Last Updated: 2025-11-17T23:56:33.612Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-269 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise when a container is breached. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrek
ompromise when a container is breached. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-processes-running-as-root - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-processes-running-as-root-inside-docker-instances
CVE ID: CVE-2025-34205 State: PUBLISHED Published: 2025-09-19T18:50:38.657Z Last Updated: 2025-11-17T23:56:33.774Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-561 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php (found in several containers) lacks authentication checks and, when executed, performs a SQL update that sets the database administrator username to 'root' and its password hash to the SHA-512 hash of th
rms a SQL update that sets the database administrator username to 'root' and its password hash to the SHA-512 hash of the string 'password'. Separately, commented-out code in /var/www/app/lib/common/oses.php would unserialize session data (unserialize($_SESSION['osdata']))—a pattern that can enable remote code execution if re-enabled or reached with attacker-controlled serialized data. An attacker able to reach the resetroot.php endpoint can trivially reset the MySQL root password and obtain full database control; combined with deserialization issues this can lead to full remote code execution and system compromise. This vulnerability has been identified by the vendor as: V-2023-003 — Dead /
emote code execution and system compromise. This vulnerability has been identified by the vendor as: V-2023-003 — Dead / Insecure PHP Code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-dead-code - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-dangerous-php-dead-code-enables-rce
CVE ID: CVE-2025-34206 State: PUBLISHED Published: 2025-09-19T18:48:58.217Z Last Updated: 2025-11-17T23:56:33.927Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application (SaaS/VA) Problem Types: CWE-732, CWE-312 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) mount host configuration and secret material under /var/www/efs_storage into many Docker containers with overly-permissive filesystem permissions. Files such as secrets.env, GPG-encrypted blobs in .secrets, MySQL client keys, and application session files are accessible from multiple containers. An attacker who controls or reaches any container can rea
ication session files are accessible from multiple containers. An attacker who controls or reaches any container can read or modify these artifacts, leading to credential theft, RCE via Laravel APP_KEY, Portainer takeover, and full compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-security-architecture - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-shared-storage-permissions
CVE ID: CVE-2025-34207 State: PUBLISHED Published: 2025-09-29T20:38:29.682Z Last Updated: 2025-11-17T23:56:34.114Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-522, CWE-306 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker instances with the following options: `UserKnownHostsFile=/dev/null`, `StrictHostKeyChecking=no`, and `ForwardAgent yes`. These settings disable verification of the remote host’s SSH key and automatically forward the developer’s SSH‑agent to any host that matches the configured wildcard
mote host’s SSH key and automatically forward the developer’s SSH‑agent to any host that matches the configured wildcard patterns. As a result, an attacker who can reach a single compromised container can cause the container to connect to a malicious SSH server, capture the forwarded private keys, and use those keys for unrestricted lateral movement across the environment. This vulnerability has been identified by the vendor as: V-2024-027 — Insecure Secure Shell (SSH) Configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-ssh-config - https://help.printerlogic.com/va/
o/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-ssh-config - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-ssh-client-config
CVE ID: CVE-2025-34208 State: PUBLISHED Published: 2025-10-02T16:13:06.735Z Last Updated: 2025-11-17T23:56:34.293Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-327, CWE-759 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's `hash()` function in multiple files (server_write_requests_users.php, update_database.php, legacy/Login.php, tests/Unit/Api/IdpControllerTest.php). No per-user salt is used and the fast hash algorithms are unsuitable for password storage. An atta
pControllerTest.php). No per-user salt is used and the fast hash algorithms are unsuitable for password storage. An attacker who obtains the password database can recover cleartext passwords via offline dictionary or rainbow table attacks. The vulnerable code also contains logic that migrates legacy SHA-1 hashes to SHA-512 on login, further exposing users still on the old hash. This vulnerability was partially resolved, but still present within the legacy authentication platform. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-incorrect-encryption-algorithms-password - https://help.pri
og/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-incorrect-encryption-algorithms-password - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-password-hashing
CVE ID: CVE-2025-34209 State: PUBLISHED Published: 2025-09-29T20:35:11.366Z Last Updated: 2025-11-17T23:56:34.498Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-798 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GPG key and passphrase for the account *no‑reply+virtual‑appliance@printerlogic.com*. The key is stored in cleartext and the passphrase is hardcoded in files. An attacker with administrative access to the appliance can extract the private key, import it into their own system, and subsequently dec
dministrative access to the appliance can extract the private key, import it into their own system, and subsequently decrypt GPG-encrypted files and sign arbitrary firmware update packages. A maliciously signed update can be uploaded by an admin‑level attacker and will be executed by the appliance, giving the attacker full control of the virtual appliance. This vulnerability has been identified by the vendor as: V-2023-010 — Hardcoded Private Key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-private-gpg-key - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - h
-83-vulnerabilities.html#va-private-gpg-key - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-gpg-private-key
CVE ID: CVE-2025-34210 State: PUBLISHED Published: 2025-10-02T16:13:28.964Z Last Updated: 2025-11-17T23:56:34.684Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-256 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store a large number of sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) in cleartext files that are world-readable. Any local user - or any process that can read the host filesystem - can retrieve all of these secrets in plain text, leading to credential theft and full compromise of the appliance. The vendor does not
ll of these secrets in plain text, leading to credential theft and full compromise of the appliance. The vendor does not consider this to be a security vulnerability as this product "follows a shared responsibility model, where administrators are expected to configure persistent storage encryption." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-readable-passwords - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-readble-cle
/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-readble-cleartext-passwords
CVE ID: CVE-2025-34211 State: PUBLISHED Published: 2025-09-29T20:36:26.157Z Last Updated: 2025-11-17T23:56:34.861Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-321 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL key and matching public certificate stored in cleartext. The key belongs to the hostname `pl‑local.com` and is used by the appliance to terminate TLS connections on ports 80/443. Because the key is hardcoded, any attacker who can gain container-level access can simply read the files and obtain th
. Because the key is hardcoded, any attacker who can gain container-level access can simply read the files and obtain the private key. With the private key, the attacker can decrypt TLS traffic, perform man-in-the-middle attacks, or forge TLS certificates. This enables impersonation of the appliance’s web UI, interception of credentials, and unrestricted access to any services that trust the certificate. The same key is identical across all deployed appliances meaning a single theft compromises the confidentiality of every Vasion Print installation. This vulnerability has been identified by the vendor as: V-2024-025 — Hardcoded SSL Certificate & Private Keys. Additional Analyst Notes: - CISA
een identified by the vendor as: V-2024-025 — Hardcoded SSL Certificate & Private Keys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-ssl-private-key - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-ssl-certificate-and-private-keys
CVE ID: CVE-2025-34212 State: PUBLISHED Published: 2025-09-29T20:36:51.280Z Last Updated: 2025-11-17T23:56:35.033Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-494, CWE-732 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 (VA/SaaS deployments) possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature validation, and grants the jenkins account NOPASSWD for mount/umount. Together these allow supply chain or man-in-the-middle compromise of the build pipeline, injecti
ASSWD for mount/umount. Together these allow supply chain or man-in-the-middle compromise of the build pipeline, injection of malicious firmware, and remote code execution as root on the CI host. This vulnerability has been identified by the vendor as: V-2023-007 — Supply Chain Attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-supply-chain-build-system - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-build-pip
rint/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-build-pipeline
CVE ID: CVE-2025-34215 State: PUBLISHED Published: 2025-09-29T20:43:12.104Z Last Updated: 2025-11-17T23:56:35.197Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-321 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (only VA deployments) expose an unauthenticated firmware-upload flow: a public page returns a signed token usable at va-api/v1/update, and every Docker image contains the appliance’s private GPG key and hard-coded passphrase. An attacker who extracts the key and obtains a token can decrypt, modify, re-sign, upload, and trigger malicio
ssphrase. An attacker who extracts the key and obtains a token can decrypt, modify, re-sign, upload, and trigger malicious firmware, gaining remote code execution. This vulnerability has been identified by the vendor as: V-2024-020 — Remote Code Execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-rce-02 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-unauth-firmware-update-endpoint-rce