Azure-access vulnerabilities

Products

• Blu-ic2 Firmware 39
• Blu-ic4 Firmware 39

Newest

• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more /etc/timezone can be Arbitrarily Written CVE-2025-12603 2.3 LowNovember 1, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more /etc/avahi/services/z9.service can be Arbitrarily Written CVE-2025-12602 2.3 LowNovember 1, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Denial of Service Due to SlowLoris CVE-2025-12601 10.0 CriticalNovember 1, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Web UI Malfunction CVE-2025-12600 10.0 CriticalNovember 1, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000) CVE-2025-12599 10.0 CriticalNovember 1, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Missing Security Headers CVE-2025-12554 6.9 MediumOctober 31, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Server Certificate Verification Disabled CVE-2025-12553 10.0 CriticalOctober 31, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Insufficient Password Policy CVE-2025-12552 6.9 MediumOctober 31, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Credits Page not Matching Versions in Use in the Firmware CVE-2025-12517 2.1 LowOctober 30, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Lack of Graceful Error Handling - HTTP 5xx Error CVE-2025-12516 10.0 CriticalOctober 30, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Systemic Internal Server Errors - HTTP 500 Response CVE-2025-12515 10.0 CriticalOctober 30, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation CVE-2025-12479 10.0 CriticalOctober 29, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Non-Compliant TLS Configuration CVE-2025-12478 10.0 CriticalOctober 29, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Server Version Disclosure CVE-2025-12477 10.0 CriticalOctober 29, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Resource Lacking AuthN CVE-2025-12476 10.0 CriticalOctober 29, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Local Privilege Escalation CVE-2025-12425 10.0 CriticalOctober 28, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Privilege Escalation through SUID-bit Binary CVE-2025-12424 10.0 CriticalOctober 28, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Denial of Service - Protocol Manipulation CVE-2025-12423 10.0 CriticalOctober 28, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Vulnerable Upgrade Feature (Arbitrary File Write) CVE-2025-12422 10.0 CriticalOctober 28, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Error Messages Wrapped In HTTP Header CVE-2025-12365 6.9 MediumOctober 27, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Weak Password Policy CVE-2025-12364 10.0 CriticalOctober 27, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Email Password Disclosure CVE-2025-12363 10.0 CriticalOctober 27, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Missing Initial Password Change CVE-2025-12285 10.0 CriticalOctober 26, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Lack of Input Validation CVE-2025-12284 6.9 MediumOctober 26, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Mail Configuration File Manipulation + Command Execution CVE-2025-12275 10.0 CriticalOctober 26, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Logout Functionality not Working CVE-2025-12278 6.9 MediumOctober 26, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more CSRF Token not Properly Implemented CVE-2025-12221 2.1 LowOctober 25, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Busybox 1.31.1 - Multiple Known Vulnerabilities CVE-2025-12220 10.0 CriticalOctober 25, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Vulnerable Components in Azure Access OS CVE-2025-12219 10.0 CriticalOctober 25, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Weak Default Credentials CVE-2025-12218 10.0 CriticalOctober 25, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more SNMP Default Community String (public) CVE-2025-12217 6.9 MediumOctober 25, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Malicious / Malformed App can be Installed but not Uninstalled CVE-2025-12216 10.0 CriticalOctober 25, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Undocumented Administrative Accounts CVE-2025-12176 10.0 CriticalOctober 24, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Serial Console Enabled CVE-2025-12114 5.2 MediumOctober 23, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Incorrect Content-Type Header CVE-2025-12104 10.0 CriticalOctober 23, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute CVE-2025-12031 5.3 MediumOctober 21, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Incorrect Content-Type Header CVE-2025-12001 10.0 CriticalOctober 20, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Incorrect Content-Type Header CVE-2025-11925 10.0 CriticalOctober 17, 2025
• azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more APIs Lack Rate Limiting CVE-2025-11832 Public exploit 10.0 CriticalOctober 15, 2025