# Azure Access Technology BLU-IC4.

Every CVE that names Azure Access Technology BLU-IC4 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [/etc/timezone can be Arbitrarily Written](https://agentprime.io/advisories/CVE-2025-12603.md)
  `CVE-2025-12603` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 2.3 Low · Not analysed yet · Published 1 Nov 2025 · Tags: Memory corruption
- [/etc/avahi/services/z9.service can be Arbitrarily Written](https://agentprime.io/advisories/CVE-2025-12602.md)
  `CVE-2025-12602` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 2.3 Low · Not analysed yet · Published 1 Nov 2025 · Tags: Memory corruption
- [Denial of Service Due to SlowLoris](https://agentprime.io/advisories/CVE-2025-12601.md)
  `CVE-2025-12601` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2025 · Tags: CWE-730
- [Web UI Malfunction](https://agentprime.io/advisories/CVE-2025-12600.md)
  `CVE-2025-12600` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2025 · Tags: CWE-730
- [Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)](https://agentprime.io/advisories/CVE-2025-12599.md)
  `CVE-2025-12599` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2025 · Tags: Hard-coded credentials
- [Missing Security Headers](https://agentprime.io/advisories/CVE-2025-12554.md)
  `CVE-2025-12554` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-693
- [Server Certificate Verification Disabled](https://agentprime.io/advisories/CVE-2025-12553.md)
  `CVE-2025-12553` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-599
- [Insufficient Password Policy](https://agentprime.io/advisories/CVE-2025-12552.md)
  `CVE-2025-12552` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Hard-coded credentials
- [Credits Page not Matching Versions in Use in the Firmware](https://agentprime.io/advisories/CVE-2025-12517.md)
  `CVE-2025-12517` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 2.1 Low · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-448
- [Lack of Graceful Error Handling - HTTP 5xx Error](https://agentprime.io/advisories/CVE-2025-12516.md)
  `CVE-2025-12516` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-394
- [Systemic Internal Server Errors - HTTP 500 Response](https://agentprime.io/advisories/CVE-2025-12515.md)
  `CVE-2025-12515` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-394
- [Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation](https://agentprime.io/advisories/CVE-2025-12479.md)
  `CVE-2025-12479` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Non-Compliant TLS Configuration](https://agentprime.io/advisories/CVE-2025-12478.md)
  `CVE-2025-12478` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2025 · Tags: Weak cryptography or TLS
- [Server Version Disclosure](https://agentprime.io/advisories/CVE-2025-12477.md)
  `CVE-2025-12477` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2025 · Tags: Authentication bypass
- [Resource Lacking AuthN](https://agentprime.io/advisories/CVE-2025-12476.md)
  `CVE-2025-12476` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2025 · Tags: Authentication bypass
- [Local Privilege Escalation](https://agentprime.io/advisories/CVE-2025-12425.md)
  `CVE-2025-12425` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2025 · Tags: Privilege escalation
- [Privilege Escalation through SUID-bit Binary](https://agentprime.io/advisories/CVE-2025-12424.md)
  `CVE-2025-12424` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2025 · Tags: Privilege escalation
- [Denial of Service - Protocol Manipulation](https://agentprime.io/advisories/CVE-2025-12423.md)
  `CVE-2025-12423` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2025 · Tags: CWE-248
- [Vulnerable Upgrade Feature (Arbitrary File Write)](https://agentprime.io/advisories/CVE-2025-12422.md)
  `CVE-2025-12422` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2025 · Tags: Path traversal
- [Error Messages Wrapped In HTTP Header](https://agentprime.io/advisories/CVE-2025-12365.md)
  `CVE-2025-12365` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Information disclosure
- [Weak Password Policy](https://agentprime.io/advisories/CVE-2025-12364.md)
  `CVE-2025-12364` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2025 · Tags: Hard-coded credentials
- [Email Password Disclosure](https://agentprime.io/advisories/CVE-2025-12363.md)
  `CVE-2025-12363` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2025 · Tags: Information disclosure
- [Missing Initial Password Change](https://agentprime.io/advisories/CVE-2025-12285.md)
  `CVE-2025-12285` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2025 · Tags: CWE-20
- [Lack of Input Validation](https://agentprime.io/advisories/CVE-2025-12284.md)
  `CVE-2025-12284` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2025 · Tags: CWE-20
- [Mail Configuration File Manipulation + Command Execution](https://agentprime.io/advisories/CVE-2025-12275.md)
  `CVE-2025-12275` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2025 · Tags: CWE-20
- [Logout Functionality not Working](https://agentprime.io/advisories/CVE-2025-12278.md)
  `CVE-2025-12278` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2025 · Tags: CWE-20
- [CSRF Token not Properly Implemented](https://agentprime.io/advisories/CVE-2025-12221.md)
  `CVE-2025-12221` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 2.1 Low · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-16
- [Busybox 1.31.1 - Multiple Known Vulnerabilities](https://agentprime.io/advisories/CVE-2025-12220.md)
  `CVE-2025-12220` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-1395
- [Vulnerable Components in Azure Access OS](https://agentprime.io/advisories/CVE-2025-12219.md)
  `CVE-2025-12219` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-1395
- [Weak Default Credentials](https://agentprime.io/advisories/CVE-2025-12218.md)
  `CVE-2025-12218` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-1392
- [SNMP Default Community String (public)](https://agentprime.io/advisories/CVE-2025-12217.md)
  `CVE-2025-12217` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-1392
- [Malicious / Malformed App can be Installed but not Uninstalled](https://agentprime.io/advisories/CVE-2025-12216.md)
  `CVE-2025-12216` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-1301
- [Undocumented Administrative Accounts](https://agentprime.io/advisories/CVE-2025-12176.md)
  `CVE-2025-12176` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Oct 2025 · Tags: CWE-1242
- [Serial Console Enabled](https://agentprime.io/advisories/CVE-2025-12114.md)
  `CVE-2025-12114` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 5.2 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-1191
- [Incorrect Content-Type Header](https://agentprime.io/advisories/CVE-2025-12104.md)
  `CVE-2025-12104` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-1104
- [HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute](https://agentprime.io/advisories/CVE-2025-12031.md)
  `CVE-2025-12031` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2025 · Tags: CWE-1004
- [Incorrect Content-Type Header](https://agentprime.io/advisories/CVE-2025-12001.md)
  `CVE-2025-12001` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2025 · Tags: CWE-20
- [Incorrect Content-Type Header](https://agentprime.io/advisories/CVE-2025-11925.md)
  `CVE-2025-11925` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Oct 2025 · Tags: CWE-754
- [APIs Lack Rate Limiting](https://agentprime.io/advisories/CVE-2025-11832.md)
  `CVE-2025-11832` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2025 · Tags: Denial of service

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=azure-access-technology-blu-ic4>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/azure-access-technology-blu-ic4/>. Everything for agents: <https://agentprime.io/llms.txt>.