EUVD-2024-55042

A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution...

EUVD-2024-55043

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field...

CVE-2024-45162

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field...

CVE-2024-45161

A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution...

CVE-2024-45162

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field...

CVE-2024-45162: Stack-based Buffer Overflow

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field...

PT-2025-44317

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The software exhibits a non-compliant TLS configuration. Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC4 to a version later than 1.19.5...

Blu-Castle BCUM221E 安全漏洞

The Blu-Castle BCUM221E is a wireless router from the Spanish company Blu-Castle. A security vulnerability exists in the Blu-Castle BCUM221E version 1.0.0P220507, which stems from a cross-site request forgery issue in the management web interface that could lead to data disclosure or execution of...

Blu-Castle BCUM221E 安全漏洞

The Blu-Castle BCUM221E is a wireless router from Blu-Castle Spain. A security vulnerability exists in the Blu-Castle BCUM221E version 1.0.0P220507 that stems from a stack-based buffer overflow in the phddns client password field...

PT-2025-44300

Name of the Vulnerable Software and Affected Versions Blu-Castle BCUM221E version 1.0.0P220507 Description A Cross-Site Request Forgery CSRF issue exists in the administrative web GUI. This can be exploited through various methods, including a crafted URL, loading an image, or using an...

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in the Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from a TLS configuration...

CVE-2024-45161

A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution...

CVE-2025-12478: Inadequate Encryption Strength

Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12476: Missing Authentication for Critical Function

Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2024-45161: Cross-Site Request Forgery (CSRF)

A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution...

CVE-2024-45161

A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution...

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. An information disclosure vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4, which is caused by incorrect...

CVE-2024-45162

A stack-based buffer overflow vulnerability exists in the phddns client of the Blu-Castle BCUM221E wireless router (version 1.0.0P220507 ). The flaw is triggered through the password field . While the vulnerability can lead to a total technical impact , no specific exploit details or proof-of-con...

CVE-2024-45161

A Cross-Site Request Forgery (CSRF) vulnerability exists in the administrative web GUI of the Blu-Castle BCUM221E wireless router, specifically affecting version 1.0.0P220507 . The flaw allows an attacker to exploit the interface via a crafted URL, image load, or XMLHttpRequest, potentially leadi...

CVE-2025-12479: Cross-Site Request Forgery (CSRF)

Systemic Lack of Cross-Site Request Forgery CSRF Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...