Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

39 records

Vendor: Azure Access Technology Component: Blu-ic2 Firmware Clear all filters
TI-2025-11557 CVE-2025-12603 · GHSA-g3pw-38gc-mxqq

Out-of-bounds write in Azure Access Technology BLU-IC2

Priority LOW 12

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00299 Published 2025-11-01 No fix listed CWE-787
TI-2025-11556 CVE-2025-12602 · GHSA-vrg6-vm63-85rh

Out-of-bounds write in Azure Access Technology BLU-IC2

Priority LOW 12

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00299 Published 2025-11-01 No fix listed CWE-787
TI-2025-11555 CVE-2025-12601 · GHSA-jcph-w2fx-w8j8

Denial of Service Due to SlowLoris

Priority MEDIUM 49

Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00335 Published 2025-11-01 No fix listed CWE-730
TI-2025-11554 CVE-2025-12600 · GHSA-xc8c-wpcx-484m

Web UI Malfunction

Priority MEDIUM 49

Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-11-01 No fix listed CWE-730
TI-2025-11516 CVE-2025-12553 · GHSA-785c-r7jc-9qxg

Server Certificate Verification Disabled

Priority MEDIUM 48

Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0022 Published 2025-10-31 No fix listed CWE-599
TI-2025-11515 CVE-2025-12552 · GHSA-2pxm-j656-vm6g

Insufficient Password Policy

Priority LOW 36

Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00342 Published 2025-10-31 No fix listed CWE-521
TI-2025-11488 CVE-2025-12517 · GHSA-44vv-qwrx-c34r

Credits Page not Matching Versions in Use in the Firmware

Priority LOW 11

Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00208 Published 2025-10-30 No fix listed CWE-448
TI-2025-11487 CVE-2025-12516 · GHSA-5pqq-993m-xpc4

Lack of Graceful Error Handling - HTTP 5xx Error

Priority MEDIUM 49

Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-10-30 No fix listed CWE-394
TI-2025-11486 CVE-2025-12515 · GHSA-g88q-58f2-qh8w

Systemic Internal Server Errors - HTTP 500 Response

Priority MEDIUM 49

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00369 Published 2025-10-30 No fix listed CWE-394
TI-2025-11450 CVE-2025-12479 · GHSA-hq95-v36h-xqg3

Cross-site request forgery in Azure Access Technology BLU-IC2

Priority MEDIUM 48

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0017 Published 2025-10-29 No fix listed CWE-352
TI-2025-11449 CVE-2025-12478 · GHSA-vcv8-7fr8-7xqg

Non-Compliant TLS Configuration

Priority MEDIUM 48

Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00242 Published 2025-10-29 No fix listed CWE-326
TI-2025-11399 CVE-2025-12423 · GHSA-j24q-5p96-5g77

Denial of Service - Protocol Manipulation

Priority MEDIUM 43

Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00335 Published 2025-10-28 No fix listed CWE-248
TI-2025-11398 CVE-2025-12422 · GHSA-r668-gv5f-w9pf

Path traversal in Azure Access Technology BLU-IC2

Priority MEDIUM 43

Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00485 Published 2025-10-28 No fix listed CWE-22
TI-2025-11341 CVE-2025-12364 · GHSA-5p2h-wm97-rcm6

Weak Password Policy

Priority MEDIUM 49

Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00342 Published 2025-10-27 No fix listed CWE-521
TI-2025-11267 CVE-2025-12284 · GHSA-fwwv-7q49-jm9f

Improper input validation in Azure Access Technology BLU-IC2

Priority LOW 36

Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00195 Published 2025-10-26 No fix listed CWE-20
TI-2025-11258 CVE-2025-12275 · GHSA-54cc-2jj5-99fc

Improper input validation in Azure Access Technology BLU-IC2

Priority MEDIUM 50

Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00544 Published 2025-10-26 No fix listed CWE-20
Load more