目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2025-34189— Vasion Print和Vasion Print Virtual Appliance Host 安全漏洞

EPSS 0.05% · P17
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2025-34189の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
Vasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session Hijacking
ソース: NVD (National Vulnerability Database)
脆弱性説明
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application versions prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability in the local inter-process communication (IPC) mechanism. The software stores IPC request and response files inside /opt/PrinterInstallerClient/tmp with world-readable and world-writable permissions. Any local user can craft malicious request files that are processed by privileged daemons, leading to unauthorized actions being executed in other user sessions. This breaks user session isolation, potentially allowing local attackers to hijack sessions, perform unintended actions in the context of other users, and impact system integrity and availability. This vulnerability has been identified by the vendor as: V-2022-004 — Client Inter-process Security.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
关键资源的不正确权限授予
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Vasion Print和Vasion Print Virtual Appliance Host 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Vasion Print和Vasion Print Virtual Appliance Host都是Vasion公司的产品。Vasion Print是一款基于 SaaS 的云托管应用程序，用于管理和部署打印机。Vasion Print Virtual Appliance Host是一个打印管理软件。 Vasion Print Virtual Appliance Host 1.0.735之前版本和Vasion Print Application 20.0.1330之前版本存在安全漏洞，该漏洞源于本地进程间通
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
VasionPrint Virtual Appliance Host * ~ 1.0.735 -
VasionPrint Application * ~ 20.0.1330 -

II. CVE-2025-34189の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2025-34189のインテリジェンス情報

请登录查看更多情报信息。

Same Patch Batch · Vasion · 2025-09-19 · 18 CVEs total

CVE-2025-34198Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance
CVE-2025-34190Vasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass v
CVE-2025-34191Vasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlin
CVE-2025-34188Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions
CVE-2025-34205Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE
CVE-2025-34199Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle At
CVE-2025-34193Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protec
CVE-2025-34201Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances
CVE-2025-34203Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Pa
CVE-2025-34200Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext
CVE-2025-34195Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Exe
CVE-2025-34197Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password an
CVE-2025-34194Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary Fil
CVE-2025-34204Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances
CVE-2025-34206Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions
CVE-2025-34192Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version
CVE-2025-34202Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN

IV. 関連脆弱性

同じ製品: Print Virtual Appliance Host
同じベンダー: Vasion
同じ弱点: CWE-732

V. CVE-2025-34189へのコメント

まだコメントはありません

コメントを残す