Azure Access Technology Vulnerabilities and Affected Products
Vulnerabilities associated with BLU-IC4.
Products
Clear product| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
/etc/timezone can be Arbitrarily Written/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-787Nov 1, 2025 | CVSS2.3v4.0 | EPSS0.279% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
/etc/avahi/services/z9.service can be Arbitrarily Written/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-787Nov 1, 2025 | CVSS2.3v4.0 | EPSS0.279% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2025-12601CRITICAL | Denial of Service Due to SlowLorisDenial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-730Nov 1, 2025 | CVSS10.0v4.0 | EPSS0.312% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12600CRITICAL | Web UI MalfunctionWeb UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-730Nov 1, 2025 | CVSS10.0v4.0 | EPSS0.345% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12599CRITICAL | Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-321Nov 1, 2025 | CVSS10.0v4.0 | EPSS0.398% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12554MEDIUM | Missing Security HeadersMissing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-693Oct 31, 2025 | CVSS6.9v4.0 | EPSS0.345% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12553CRITICAL | Server Certificate Verification DisabledEmail Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-599Oct 31, 2025 | CVSS10.0v4.0 | EPSS0.205% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12552MEDIUM | Insufficient Password PolicyInsufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-521Oct 31, 2025 | CVSS6.9v4.0 | EPSS0.319% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Credits Page not Matching Versions in Use in the FirmwareCredits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-448Oct 30, 2025 | CVSS2.1v4.0 | EPSS0.194% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2025-12516CRITICAL | Lack of Graceful Error Handling - HTTP 5xx ErrorLack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-394Oct 30, 2025 | CVSS10.0v4.0 | EPSS0.345% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12515CRITICAL | Systemic Internal Server Errors - HTTP 500 ResponseSystemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-394Oct 30, 2025 | CVSS10.0v4.0 | EPSS0.345% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12479CRITICAL | Systemic Lack of Cross-Site Request Forgery (CSRF) Token ImplementationSystemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-352Oct 29, 2025 | CVSS10.0v4.0 | EPSS0.159% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12478CRITICAL | Non-Compliant TLS ConfigurationNon-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-326Oct 29, 2025 | CVSS10.0v4.0 | EPSS0.226% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12477CRITICAL | Server Version DisclosureServer Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-306Oct 29, 2025 | CVSS10.0v4.0 | EPSS0.324% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12476CRITICAL | Resource Lacking AuthNResource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-306Oct 29, 2025 | CVSS10.0v4.0 | EPSS0.319% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12425CRITICAL | Local Privilege EscalationLocal Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-269Oct 28, 2025 | CVSS10.0v4.0 | EPSS0.203% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12424CRITICAL | Privilege Escalation through SUID-bit BinaryPrivilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-269Oct 28, 2025 | CVSS10.0v4.0 | EPSS0.319% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12423CRITICAL | Denial of Service - Protocol ManipulationProtocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . CWE-248Oct 28, 2025 | CVSS10.0v4.0 | EPSS0.312% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12422CRITICAL | Vulnerable Upgrade Feature (Arbitrary File Write)Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-22Oct 28, 2025 | CVSS10.0v4.0 | EPSS0.452% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12365MEDIUM | Error Messages Wrapped In HTTP HeaderError Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-209Oct 27, 2025 | CVSS6.9v4.0 | EPSS0.234% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12364CRITICAL | Weak Password PolicyWeak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-521Oct 27, 2025 | CVSS10.0v4.0 | EPSS0.319% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12363CRITICAL | Email Password DisclosureEmail Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-200Oct 27, 2025 | CVSS10.0v4.0 | EPSS0.296% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12285CRITICAL | Missing Initial Password ChangeMissing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | CVSS10.0v4.0 | EPSS0.319% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12284MEDIUM | Lack of Input ValidationLack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | CVSS6.9v4.0 | EPSS0.182% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-12275CRITICAL | Mail Configuration File Manipulation + Command ExecutionMail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CWE-20Oct 26, 2025 | CVSS10.0v4.0 | EPSS0.508% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |