CVE-2025-12278

Published: Oct 26, 2025Modified: Jun 17, 2026

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: a0340c66-c385-4f8b-991b-3d05f6fd5220 (Secondary)

Description

Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Affected (2)

Products: Azure Access: Blu Ic2 Firmware, Blu Ic4 Firmware

Azure Access

2 products

Blu Ic2 Firmware

Blu Ic4 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Azure Access Blu Ic2 Firmware	Before 1.20

Running on/with	Platform Versions
Azure Access Blu Ic2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Azure Access Blu Ic4 Firmware	Before 1.20

Running on/with	Platform Versions
Azure Access Blu Ic4	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-613

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (1)

https://azure-access.com/security-advisories

Source: a0340c66-c385-4f8b-991b-3d05f6fd5220

Vendor Advisory

Timeline

No history available yet.