CVE-2025-34217

Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) (affected versions not specified)

Description The Vasion Print Virtual Appliance Host and Application contains an undocumented user, printerlogic, with a hardcoded SSH public key located in the ~/.ssh/authorized keys file. A sudoers rule grants the printerlogic ssh group ‘NOPASSWD: ALL’ privileges. Possession of the corresponding private key grants an attacker root access to the appliance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.