What’s Vulnerable › Products

Azure-Access Blu-Ic2 Firmware vulnerabilities

39 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 39 published in the last 12 months.

Check whether your Azure-Access Blu-Ic2 Firmware version is affected

Latest Azure-Access Blu-Ic2 Firmware vulnerabilities

• CVE-2025-12603 — /etc/timezone can be Arbitrarily Written (CVSS 9.8)
• CVE-2025-12602 — /etc/avahi/services/z9.service can be Arbitrarily Written (CVSS 9.8)
• CVE-2025-12601 — Denial of Service Due to SlowLoris (CVSS 7.5)
• CVE-2025-12600 — Web UI Malfunction (CVSS 9.8)
• CVE-2025-12599 — Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000) (CVSS 9.8)
• CVE-2025-12554 — Missing Security Headers (CVSS 9.8)
• CVE-2025-12553 — Server Certificate Verification Disabled (CVSS 9.8)
• CVE-2025-12552 — Insufficient Password Policy (CVSS 9.8)
• CVE-2025-12517 — Credits Page not Matching Versions in Use in the Firmware (CVSS 5.3)
• CVE-2025-12516 — Lack of Graceful Error Handling - HTTP 5xx Error (CVSS 9.8)
• CVE-2025-12515 — Systemic Internal Server Errors - HTTP 500 Response (CVSS 9.8)
• CVE-2025-12479 — Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation (CVSS 8.8)
• CVE-2025-12478 — Non-Compliant TLS Configuration (CVSS 9.8)
• CVE-2025-12477 — Server Version Disclosure (CVSS 9.8)
• CVE-2025-12476 — Resource Lacking AuthN (CVSS 9.8)
• CVE-2025-12425 — Local Privilege Escalation (CVSS 7.8)
• CVE-2025-12424 — Privilege Escalation through SUID-bit Binary (CVSS 9.8)
• CVE-2025-12423 — Denial of Service - Protocol Manipulation (CVSS 7.5)
• CVE-2025-12422 — Vulnerable Upgrade Feature (Arbitrary File Write) (CVSS 9.8)
• CVE-2025-12365 — Error Messages Wrapped In HTTP Header (CVSS 5.3)
• CVE-2025-12364 — Weak Password Policy (CVSS 9.8)
• CVE-2025-12363 — Email Password Disclosure (CVSS 7.5)
• CVE-2025-12285 — Missing Initial Password Change (CVSS 9.8)
• CVE-2025-12284 — Lack of Input Validation (CVSS 6.1)
• CVE-2025-12278 — Logout Functionality not Working (CVSS 6.5)