81 matches found
CVE-2025-12517
Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12515
Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12515
Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12517
CVE-2025-12517 concerns Azure Access Technology BLU-IC2 and BLU-IC4 firmware where the credits page does not match the actual firmware versions in use (affecting BLU-IC2/BLU-IC4 up to 1.19.5). NVD records a CVSSv3.1 base score of 5.3 (MEDIUM) with network attack vector and low integrity/availabil...
PT-2025-44415
Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The software experiences systemic internal server errors, resulting in HTTP 500 responses. Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC...
EUVD-2025-36681
Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12422
Vulnerable Upgrade Feature Arbitrary File Write may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12477
Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
EUVD-2025-36679
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12478
CVE-2025-12478 concerns a non-compliant TLS configuration affecting Azure Access Technology BLU-IC2 and BLU-IC4 up to version 1.19.5. The PT-security advisory specifies affected versions as BLU-IC2 and BLU-IC4 through 1.19.5 and recommends upgrading to a version later than 1.19.5. Other connected...
CVE-2025-12478 Non-Compliant TLS Configuration
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12476 Resource Lacking AuthN
Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞
The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in the Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from a TLS configuration...
CVE-2025-12425
Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12423
Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12425
CVE-2025-12425 is a local privilege escalation affecting Azure Access Technology BLU-IC2 and BLU-IC4 up to v1.19.5. Descriptions across CNVD/Red Hat/NVD/EUVD/CNNVD report a local elevation of privilege due to improper privilege management. Impact is described as enabling an attacker with local ac...
CVE-2025-12424
Azure Access Technology BLU-IC2 and BLU-IC4 are vulnerable to privilege escalation due to improper privilege management in a SUID-bit binary. Affected products/versions: BLU-IC2 and BLU-IC4 up to 1.19.5. Root cause: SUID-binary enables elevation of privileges. Impact: described as Privilege Escal...
CVE-2025-12422 Vulnerable Upgrade Feature (Arbitrary File Write)
Vulnerable Upgrade Feature Arbitrary File Write may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12422
The CVE-2025-12422 vulnerability affects Azure Access Technology BLU-IC2 and BLU-IC4 (up to and including version 1.19.5). A flaw in the upgrade feature allows arbitrary file writing, which could enable elevation of privileges to a super user on the device. Publicly documented details in PT-Secur...