Advisories · Technology

Azure Access Technology BLU-IC2.

Every CVE that names Azure Access Technology BLU-IC2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-12603 CVE record

CVSS 2.3 Low

/etc/timezone can be Arbitrarily Written
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Memory corruption
Not analysed yet 1 Nov 2025
CVE-2025-12602 CVE record

CVSS 2.3 Low

/etc/avahi/services/z9.service can be Arbitrarily Written
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Memory corruption
Not analysed yet 1 Nov 2025
CVE-2025-12601 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Denial of Service Due to SlowLoris
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-730
Not analysed yet 1 Nov 2025
CVE-2025-12600 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Web UI Malfunction
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-730
Not analysed yet 1 Nov 2025
CVE-2025-12599 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Hard-coded credentials
Not analysed yet 1 Nov 2025
CVE-2025-12554 CVE record

CVSS 6.9 Medium

Missing Security Headers
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-693
Not analysed yet 31 Oct 2025
CVE-2025-12553 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Server Certificate Verification Disabled
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-599
Not analysed yet 31 Oct 2025
CVE-2025-12552 CVE record

CVSS 6.9 Medium

Insufficient Password Policy
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Hard-coded credentials
Not analysed yet 31 Oct 2025
CVE-2025-12517 CVE record

CVSS 2.1 Low

Credits Page not Matching Versions in Use in the Firmware
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-448
Not analysed yet 30 Oct 2025
CVE-2025-12516 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Lack of Graceful Error Handling - HTTP 5xx Error
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-394
Not analysed yet 30 Oct 2025
CVE-2025-12515 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Systemic Internal Server Errors - HTTP 500 Response
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-394
Not analysed yet 30 Oct 2025
CVE-2025-12479 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Cross-site request forgery (CSRF)
Not analysed yet 29 Oct 2025
CVE-2025-12478 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Non-Compliant TLS Configuration
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Weak cryptography or TLS
Not analysed yet 29 Oct 2025
CVE-2025-12477 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Server Version Disclosure
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Authentication bypass
Not analysed yet 29 Oct 2025
CVE-2025-12476 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Resource Lacking AuthN
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Authentication bypass
Not analysed yet 29 Oct 2025
CVE-2025-12425 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Local Privilege Escalation
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Privilege escalation
Not analysed yet 28 Oct 2025
CVE-2025-12424 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Privilege Escalation through SUID-bit Binary
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Privilege escalation
Not analysed yet 28 Oct 2025
CVE-2025-12423 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Denial of Service - Protocol Manipulation
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-248
Not analysed yet 28 Oct 2025
CVE-2025-12422 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Vulnerable Upgrade Feature (Arbitrary File Write)
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Path traversal
Not analysed yet 28 Oct 2025
CVE-2025-12365 CVE record

CVSS 6.9 Medium

Error Messages Wrapped In HTTP Header
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Information disclosure
Not analysed yet 27 Oct 2025
CVE-2025-12364 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Weak Password Policy
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Hard-coded credentials
Not analysed yet 27 Oct 2025
CVE-2025-12363 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Email Password Disclosure
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Information disclosure
Not analysed yet 27 Oct 2025
CVE-2025-12285 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing Initial Password Change
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-20
Not analysed yet 26 Oct 2025
CVE-2025-12284 CVE record

CVSS 6.9 Medium

Lack of Input Validation
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-20
Not analysed yet 26 Oct 2025
CVE-2025-12275 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Mail Configuration File Manipulation + Command Execution
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-20
Not analysed yet 26 Oct 2025
CVE-2025-12278 CVE record

CVSS 6.9 Medium

Logout Functionality not Working
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-20
Not analysed yet 26 Oct 2025
CVE-2025-12221 CVE record

CVSS 2.1 Low

CSRF Token not Properly Implemented
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-16
Not analysed yet 25 Oct 2025
CVE-2025-12220 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Busybox 1.31.1 - Multiple Known Vulnerabilities
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1395
Not analysed yet 25 Oct 2025
CVE-2025-12219 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Vulnerable Components in Azure Access OS
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1395
Not analysed yet 25 Oct 2025
CVE-2025-12218 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Weak Default Credentials
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1392
Not analysed yet 25 Oct 2025
CVE-2025-12217 CVE record

CVSS 6.9 Medium

SNMP Default Community String (public)
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1392
Not analysed yet 25 Oct 2025
CVE-2025-12216 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Malicious / Malformed App can be Installed but not Uninstalled
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1301
Not analysed yet 25 Oct 2025
CVE-2025-12176 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Undocumented Administrative Accounts
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1242
Not analysed yet 24 Oct 2025
CVE-2025-12114 CVE record

CVSS 5.2 Medium

Serial Console Enabled
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1191
Not analysed yet 23 Oct 2025
CVE-2025-12104 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Incorrect Content-Type Header
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1104
Not analysed yet 23 Oct 2025
CVE-2025-12031 CVE record

CVSS 5.3 Medium

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1004
Not analysed yet 21 Oct 2025
CVE-2025-12001 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Incorrect Content-Type Header
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-20
Not analysed yet 20 Oct 2025
CVE-2025-11925 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Incorrect Content-Type Header
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-754
Not analysed yet 17 Oct 2025
CVE-2025-11832 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

APIs Lack Rate Limiting
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- Denial of service
Not analysed yet 15 Oct 2025