CVE-2025-11832

CRITICAL

Azure-access Blu-ic2 Firmware - Resource Allocation Without Limits

Title source: rule

Description

Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Exploits (1)

nomisec STUB

by NetVanguard-cmd · poc

https://github.com/NetVanguard-cmd/CVE-2025-11832

View Code ZIP pw:eip

References (1)

[Vendor Advisory] https://azure-access.com/security-advisories

Scores

CVSS v3 9.8

EPSS 0.0006

EPSS Percentile 19.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-770

Status published

Products (2)

azure-access/blu-ic2_firmware < 1.20

azure-access/blu-ic4_firmware < 1.20

Published Oct 15, 2025

Tracked Since Feb 18, 2026