CVE-2025-12363 Email Password Disclosure

Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12278

Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12284

Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

PT-2025-44006

Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12285

Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12284

Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12275

Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12285

The CVE-2025-12285 entry concerns Azure Access Technology BLU-IC2 and BLU-IC4 (through 1.19.5) with a missing initial password change. Connected sources confirm affected devices are networked access controllers from BLU-IC2/BLU-IC4 lines, and that the issue stems from not changing the initial def...

CVE-2025-12285 Missing Initial Password Change

Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12275 Mail Configuration File Manipulation + Command Execution

Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12278 Logout Functionality not Working

Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12278

CVE-2025-12278 describes a logout functionality issue affecting Azure Access Technology’s BLU-IC2 and BLU-IC4 networked access controllers. Connected sources provide concrete details: affected products are BLU-IC2 and BLU-IC4, with versions through 1.19.5 (inclusive). The root cause is a logout f...

PT-2025-43752

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The software contains a flaw related to mail configuration file manipulation that can lead to command execution. The issue affects the handling of configuration files,...

CVE-2025-12221

CVE-2025-12221 is a CSRF-related vulnerability affecting Busybox 1.31.1 and Azure Access Technology BLU-IC2/BLU-IC4 up to version 1.19.5. Reports describe improper validation leading to unauthorized operations via crafted HTTP requests. Impact is indicated as high for confidentiality, integrity, ...

CVE-2025-12220 Busybox 1.31.1 - Multiple Known Vulnerabilities

Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12218 Weak Default Credentials

Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12217

The CVE-2025-12217 issue concerns the use of a default SNMP community string (public) on Azure Access Technology BLU-IC2 and BLU-IC4. Affected devices are BLU-IC2 and BLU-IC4 with firmware versions up to 1.19.5. The root cause is the default community string, enabling network access without crede...

PT-2025-43732

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The firmware uses a default SNMP community string, specifically 'public'. This allows unauthorized access to device information and potential modification of settings...

PT-2025-43731

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description A malicious or malformed application can be installed but not uninstalled, potentially leading to unavailability of the system. This issue creates a permanent...

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A denial of service vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4, which arises from a malicious or...