Read the docs

Azure Access Technology

Records39All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical27CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Azure Access Technology records in CISA KEV

No Azure Access Technology vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blu-ic2 Firmware 39 records MEDIUM Blu-ic4 Firmware 39 records MEDIUM

Records

39 records in Blu-ic4 Firmware · all components

TI-2025-11258 CVE-2025-12275 · GHSA-54cc-2jj5-99fc

Improper input validation in Azure Access Technology BLU-IC2

Priority MEDIUM 50

Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00544 Published 2025-10-26 No fix listed CWE-20
TI-2025-11555 CVE-2025-12601 · GHSA-jcph-w2fx-w8j8

Denial of Service Due to SlowLoris

Priority MEDIUM 49

Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00335 Published 2025-11-01 No fix listed CWE-730
TI-2025-11554 CVE-2025-12600 · GHSA-xc8c-wpcx-484m

Web UI Malfunction

Priority MEDIUM 49

Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-11-01 No fix listed CWE-730
TI-2025-11487 CVE-2025-12516 · GHSA-5pqq-993m-xpc4

Lack of Graceful Error Handling - HTTP 5xx Error

Priority MEDIUM 49

Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-10-30 No fix listed CWE-394
TI-2025-11486 CVE-2025-12515 · GHSA-g88q-58f2-qh8w

Systemic Internal Server Errors - HTTP 500 Response

Priority MEDIUM 49

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-10-30 No fix listed CWE-394
TI-2025-11341 CVE-2025-12364 · GHSA-5p2h-wm97-rcm6

Weak Password Policy

Priority MEDIUM 49

Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00342 Published 2025-10-27 No fix listed CWE-521
TI-2025-11203 CVE-2025-12220 · GHSA-pg65-5pm2-3j24

Busybox 1.31.1 - Multiple Known Vulnerabilities

Priority MEDIUM 49

Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-10-25 No fix listed CWE-1395
TI-2025-11202 CVE-2025-12219 · GHSA-985r-cgqx-57w2

Vulnerable Components in Azure Access OS

Priority MEDIUM 49

Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-10-25 No fix listed CWE-1395
TI-2025-11100 CVE-2025-12104 · GHSA-fg22-jf8j-5mrr

Incorrect Content-Type Header

Priority MEDIUM 49

Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00408 Published 2025-10-23 No fix listed CWE-1104
TI-2025-10848 CVE-2025-11832 · GHSA-hf8v-4h5p-jj4q

APIs Lack Rate Limiting

Priority MEDIUM 49

Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-10-15 No fix listed CWE-770
TI-2025-11516 CVE-2025-12553 · GHSA-785c-r7jc-9qxg

Server Certificate Verification Disabled

Priority MEDIUM 48

Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0022 Published 2025-10-31 No fix listed CWE-599
TI-2025-11450 CVE-2025-12479 · GHSA-hq95-v36h-xqg3

Cross-site request forgery in Azure Access Technology BLU-IC2

Priority MEDIUM 48

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0017 Published 2025-10-29 No fix listed CWE-352
TI-2025-11449 CVE-2025-12478 · GHSA-vcv8-7fr8-7xqg

Non-Compliant TLS Configuration

Priority MEDIUM 48

Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00242 Published 2025-10-29 No fix listed CWE-326
TI-2025-11199 CVE-2025-12216 · GHSA-6v8w-33wg-8gw2

Malicious / Malformed App can be Installed but not Uninstalled

Priority MEDIUM 48

Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00217 Published 2025-10-25 No fix listed CWE-1301
TI-2025-11003 CVE-2025-12001 · GHSA-9p37-p7vc-233f

Incorrect Content-Type Header

Priority MEDIUM 48

Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00194 Published 2025-10-20 No fix listed CWE-20
TI-2025-10934 CVE-2025-11925 · GHSA-mq46-9qcm-3xhg

Incorrect Content-Type Header

Priority MEDIUM 48

Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: thro…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00256 Published 2025-10-17 No fix listed CWE-754
TI-2025-11399 CVE-2025-12423 · GHSA-j24q-5p96-5g77

Denial of Service - Protocol Manipulation

Priority MEDIUM 43

Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00335 Published 2025-10-28 No fix listed CWE-248
TI-2025-11398 CVE-2025-12422 · GHSA-r668-gv5f-w9pf

Path traversal in Azure Access Technology BLU-IC2

Priority MEDIUM 43

Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00485 Published 2025-10-28 No fix listed CWE-22
Load more
Open these records in search →