Blu Ic4 Firmware

CVEs (37)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-12603	BLU IC2	Cri	0.64	9.8	0.00	Nov 1, 2025	/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12602	BLU IC BLU-IC	Cri	0.64	9.8	0.00	Nov 1, 2025	/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12600	Azure Access BLU-IC4	Cri	0.64	9.8	0.00	Nov 1, 2025	Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12599	Azure Access Blu Ic2 Firmware	Cri	0.64	9.8	0.00	Nov 1, 2025	Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12554	Azure Access BLU-IC4	Cri	0.64	9.8	0.00	Oct 31, 2025	Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12553	BLU IC4	Cri	0.64	9.8	0.00	Oct 31, 2025	Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12552	BLU IC BLU-IC	Cri	0.64	9.8	0.00	Oct 31, 2025	Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12516	BLU IC4	Cri	0.64	9.8	0.00	Oct 30, 2025	Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12515	BLU IC4	Cri	0.64	9.8	0.00	Oct 30, 2025	Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12478	BLU IC4	Cri	0.64	9.8	0.00	Oct 29, 2025	Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12477	BLU IC4	Cri	0.64	9.8	0.00	Oct 29, 2025	Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12476	BLU IC4	Cri	0.64	9.8	0.00	Oct 29, 2025	Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12424	BLU IC4	Cri	0.64	9.8	0.00	Oct 28, 2025	Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12364	BLU IC4	Cri	0.64	9.8	0.00	Oct 27, 2025	Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12285	Azure Access BLU-IC4	Cri	0.64	9.8	0.00	Oct 26, 2025	Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12275	BLU IC2	Cri	0.64	9.8	0.01	Oct 26, 2025	Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12220	Busybox Busybox	Cri	0.64	9.8	0.00	Oct 25, 2025	Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12219	Azure Access BLU-IC4	Cri	0.64	9.8	0.00	Oct 25, 2025	Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12104	BLU IC4	Cri	0.64	9.8	0.00	Oct 23, 2025	Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-11832	Azure Access Blu Ic2 Firmware	Cri	0.64	9.8	0.00	Oct 15, 2025	Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVE-2025-12603CriNov 1, 2025
BLU
IC2
risk 0.64cvss 9.8epss 0.00
/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12602CriNov 1, 2025
BLU IC
BLU-IC
risk 0.64cvss 9.8epss 0.00
/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12600CriNov 1, 2025
Azure Access
BLU-IC4
risk 0.64cvss 9.8epss 0.00
Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12599CriNov 1, 2025
Azure Access
Blu Ic2 Firmware
risk 0.64cvss 9.8epss 0.00
Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12554CriOct 31, 2025
Azure Access
BLU-IC4
risk 0.64cvss 9.8epss 0.00
Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12553CriOct 31, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12552CriOct 31, 2025
BLU IC
BLU-IC
risk 0.64cvss 9.8epss 0.00
Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12516CriOct 30, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12515CriOct 30, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12478CriOct 29, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12477CriOct 29, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12476CriOct 29, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12424CriOct 28, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVE-2025-12364CriOct 27, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12285CriOct 26, 2025
Azure Access
BLU-IC4
risk 0.64cvss 9.8epss 0.00
Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12275CriOct 26, 2025
BLU
IC2
risk 0.64cvss 9.8epss 0.01
Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12220CriOct 25, 2025
Busybox
Busybox
risk 0.64cvss 9.8epss 0.00
Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12219CriOct 25, 2025
Azure Access
BLU-IC4
risk 0.64cvss 9.8epss 0.00
Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12104CriOct 23, 2025
BLU
IC4
risk 0.64cvss 9.8epss 0.00
Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-11832CriOct 15, 2025
Azure Access
Blu Ic2 Firmware
risk 0.64cvss 9.8epss 0.00
Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Page 1 of 2