442 matches found
CVE-2025-12424
Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
EUVD-2025-36681
Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12422
Vulnerable Upgrade Feature Arbitrary File Write may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12479
Systemic Lack of Cross-Site Request Forgery CSRF Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12479
Systemic Lack of Cross-Site Request Forgery CSRF Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12478
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12476
Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12478
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12477
Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12477
Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12479 Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation
Systemic Lack of Cross-Site Request Forgery CSRF Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12479
CVE-2025-12479 describes a systemic lack of CSRF protection in Azure Access Technology BLU-IC2 and BLU-IC4, with affected versions up to 1.19.5. The LOCs across sources (including PT-2025-44318 and related Red Hat/CNVD entries) confirm a CSRF token implementation gap that could enable unauthorize...
CVE-2025-12478 Non-Compliant TLS Configuration
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
EUVD-2025-36679
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12478
CVE-2025-12478 concerns a non-compliant TLS configuration affecting Azure Access Technology BLU-IC2 and BLU-IC4 up to version 1.19.5. The PT-security advisory specifies affected versions as BLU-IC2 and BLU-IC4 through 1.19.5 and recommends upgrading to a version later than 1.19.5. Other connected...
CVE-2025-12478 Non-Compliant TLS Configuration
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12477 Server Version Disclosure
Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12477
The CVE-2025-12477 entry applies to Azure Access Technology BLU-IC2 and BLU-IC4, where server version disclosure is caused by an information disclosure vulnerability up to firmware 1.19.5 for both devices. Multiple connected sources corroborate that the issue allows an attacker to obtain server v...
CVE-2025-12476
The CVE-2025-12476 affects Azure Access Technology BLU-IC2 and BLU-IC4 through version 1.19.5, with root cause described as lack of authentication. Affected components are the networked access controllers BLU-IC2/BLU-IC4; impact is substantial across confidentiality, integrity, and availability p...