Azure Access

azure-access

39 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Blu Ic2 Firmware

blu-ic2_firmware

Blu Ic4 Firmware

blu-ic4_firmware

CVEs (39)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-12364 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 27, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12363 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 27, 2025 10.0 CRITICAL· v4 7.5 HIGH· v3 N/A· v2 Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12285 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 26, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12284 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 26, 2025 6.9 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12278 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 26, 2025 6.9 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12275 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 26, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12221 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 25, 2025 2.1 LOW· v4 8.8 HIGH· v3 N/A· v2 Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12220 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 25, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12219 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 25, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12218 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 25, 2025 10.0 CRITICAL· v4 9.1 CRITICAL· v3 N/A· v2 Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12217 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 25, 2025 6.9 MEDIUM· v4 9.1 CRITICAL· v3 N/A· v2 SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12216 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 25, 2025 10.0 CRITICAL· v4 5.5 MEDIUM· v3 N/A· v2 Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12176 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 24, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12114 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 23, 2025 5.2 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12104 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 23, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12031 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 21, 2025 5.3 MEDIUM· v4 5.3 MEDIUM· v3 N/A· v2 HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12001 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 20, 2025 10.0 CRITICAL· v4 6.1 MEDIUM· v3 N/A· v2 Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-11925 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 17, 2025 10.0 CRITICAL· v4 6.1 MEDIUM· v3 N/A· v2 Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: thro...Show more Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.Show less
CVE-2025-11832 1Azure Access 2Blu Ic2 Firmware Blu Ic4 Firmware Jun 17, 2026 Oct 15, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.