Azure-access

Blu-ic2 Firmware

39 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2025-12217

  • EPSS 0.05%
  • Veröffentlicht 25.10.2025 15:39:52
  • Zuletzt bearbeitet 10.11.2025 15:03:28

SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

5.5

CVE-2025-12216

  • EPSS 0.03%
  • Veröffentlicht 25.10.2025 15:33:18
  • Zuletzt bearbeitet 10.11.2025 15:04:53

Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

9.8

CVE-2025-12176

  • EPSS 0.06%
  • Veröffentlicht 24.10.2025 15:56:07
  • Zuletzt bearbeitet 10.11.2025 15:05:15

Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

5.5

CVE-2025-12114

  • EPSS 0.02%
  • Veröffentlicht 23.10.2025 15:29:13
  • Zuletzt bearbeitet 10.11.2025 15:08:27

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

9.8

CVE-2025-12104

  • EPSS 0.21%
  • Veröffentlicht 23.10.2025 03:56:26
  • Zuletzt bearbeitet 07.11.2025 20:05:44

Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

5.3

CVE-2025-12031

  • EPSS 0.04%
  • Veröffentlicht 21.10.2025 17:22:36
  • Zuletzt bearbeitet 07.11.2025 20:10:04

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

6.1

CVE-2025-12001

  • EPSS 0.1%
  • Veröffentlicht 20.10.2025 21:53:26
  • Zuletzt bearbeitet 07.11.2025 20:15:52

Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

6.1

CVE-2025-11925

  • EPSS 0.03%
  • Veröffentlicht 17.10.2025 19:56:14
  • Zuletzt bearbeitet 07.11.2025 17:14:51

Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

9.8

CVE-2025-11832

  • EPSS 0.07%
  • Veröffentlicht 15.10.2025 19:10:33
  • Zuletzt bearbeitet 07.11.2025 17:49:51

Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.