https://vulnogram.org/ Most recent CVEs assigned by Azure Access Technology (azure-access). https://vulnogram.org/seaview/icons/azure-access.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-12603 https://vulnogram.org/CVE-2025-12603 /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Low Sat, 01 Nov 2025 18:56:52 GMT https://vulnogram.org/CVE-2025-12602 https://vulnogram.org/CVE-2025-12602 /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Low Sat, 01 Nov 2025 18:54:46 GMT https://vulnogram.org/CVE-2025-12601 https://vulnogram.org/CVE-2025-12601 Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sat, 01 Nov 2025 18:49:12 GMT https://vulnogram.org/CVE-2025-12600 https://vulnogram.org/CVE-2025-12600 Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sat, 01 Nov 2025 18:48:49 GMT https://vulnogram.org/CVE-2025-12599 https://vulnogram.org/CVE-2025-12599 Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sat, 01 Nov 2025 18:39:53 GMT https://vulnogram.org/CVE-2025-12554 https://vulnogram.org/CVE-2025-12554 Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Network Exploitable Fri, 31 Oct 2025 15:52:29 GMT https://vulnogram.org/CVE-2025-12553 https://vulnogram.org/CVE-2025-12553 Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Fri, 31 Oct 2025 15:48:29 GMT https://vulnogram.org/CVE-2025-12552 https://vulnogram.org/CVE-2025-12552 Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Network Exploitable Fri, 31 Oct 2025 15:43:44 GMT https://vulnogram.org/CVE-2025-12517 https://vulnogram.org/CVE-2025-12517 Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Low Thu, 30 Oct 2025 15:47:04 GMT https://vulnogram.org/CVE-2025-12516 https://vulnogram.org/CVE-2025-12516 Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Thu, 30 Oct 2025 15:42:21 GMT https://vulnogram.org/CVE-2025-12515 https://vulnogram.org/CVE-2025-12515 Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Thu, 30 Oct 2025 15:38:45 GMT https://vulnogram.org/CVE-2025-12479 https://vulnogram.org/CVE-2025-12479 Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Wed, 29 Oct 2025 16:50:08 GMT https://vulnogram.org/CVE-2025-12478 https://vulnogram.org/CVE-2025-12478 Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Wed, 29 Oct 2025 16:37:47 GMT https://vulnogram.org/CVE-2025-12477 https://vulnogram.org/CVE-2025-12477 Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Wed, 29 Oct 2025 16:33:48 GMT https://vulnogram.org/CVE-2025-12476 https://vulnogram.org/CVE-2025-12476 Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Wed, 29 Oct 2025 16:31:47 GMT https://vulnogram.org/CVE-2025-12425 https://vulnogram.org/CVE-2025-12425 Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Tue, 28 Oct 2025 18:21:48 GMT https://vulnogram.org/CVE-2025-12424 https://vulnogram.org/CVE-2025-12424 Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Tue, 28 Oct 2025 18:18:47 GMT https://vulnogram.org/CVE-2025-12423 https://vulnogram.org/CVE-2025-12423 Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Critical Network Exploitable Tue, 28 Oct 2025 18:14:57 GMT https://vulnogram.org/CVE-2025-12422 https://vulnogram.org/CVE-2025-12422 Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Tue, 28 Oct 2025 18:09:39 GMT https://vulnogram.org/CVE-2025-12365 https://vulnogram.org/CVE-2025-12365 Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Network Exploitable Mon, 27 Oct 2025 18:12:35 GMT https://vulnogram.org/CVE-2025-12364 https://vulnogram.org/CVE-2025-12364 Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Mon, 27 Oct 2025 18:09:07 GMT https://vulnogram.org/CVE-2025-12363 https://vulnogram.org/CVE-2025-12363 Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Mon, 27 Oct 2025 18:04:44 GMT https://vulnogram.org/CVE-2025-12285 https://vulnogram.org/CVE-2025-12285 Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sun, 26 Oct 2025 16:24:09 GMT https://vulnogram.org/CVE-2025-12284 https://vulnogram.org/CVE-2025-12284 Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Network Exploitable Sun, 26 Oct 2025 16:21:56 GMT https://vulnogram.org/CVE-2025-12275 https://vulnogram.org/CVE-2025-12275 Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sun, 26 Oct 2025 16:15:33 GMT https://vulnogram.org/CVE-2025-12278 https://vulnogram.org/CVE-2025-12278 Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Network Exploitable Sun, 26 Oct 2025 16:14:33 GMT https://vulnogram.org/CVE-2025-12221 https://vulnogram.org/CVE-2025-12221 Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Low Sat, 25 Oct 2025 15:57:45 GMT https://vulnogram.org/CVE-2025-12220 https://vulnogram.org/CVE-2025-12220 Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sat, 25 Oct 2025 15:53:03 GMT https://vulnogram.org/CVE-2025-12219 https://vulnogram.org/CVE-2025-12219 Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sat, 25 Oct 2025 15:51:58 GMT https://vulnogram.org/CVE-2025-12218 https://vulnogram.org/CVE-2025-12218 Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sat, 25 Oct 2025 15:47:36 GMT https://vulnogram.org/CVE-2025-12217 https://vulnogram.org/CVE-2025-12217 SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Network Exploitable Sat, 25 Oct 2025 15:39:52 GMT https://vulnogram.org/CVE-2025-12216 https://vulnogram.org/CVE-2025-12216 Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Sat, 25 Oct 2025 15:33:18 GMT https://vulnogram.org/CVE-2025-12176 https://vulnogram.org/CVE-2025-12176 Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Fri, 24 Oct 2025 15:56:07 GMT https://vulnogram.org/CVE-2025-12114 https://vulnogram.org/CVE-2025-12114 Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Thu, 23 Oct 2025 15:29:13 GMT https://vulnogram.org/CVE-2025-12104 https://vulnogram.org/CVE-2025-12104 Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Thu, 23 Oct 2025 03:56:26 GMT https://vulnogram.org/CVE-2025-12031 https://vulnogram.org/CVE-2025-12031 HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Medium Tue, 21 Oct 2025 17:22:36 GMT https://vulnogram.org/CVE-2025-12001 https://vulnogram.org/CVE-2025-12001 Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Mon, 20 Oct 2025 21:53:26 GMT https://vulnogram.org/CVE-2025-11925 https://vulnogram.org/CVE-2025-11925 Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Fri, 17 Oct 2025 19:56:14 GMT https://vulnogram.org/CVE-2025-11832 https://vulnogram.org/CVE-2025-11832 Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Critical Network Exploitable Wed, 15 Oct 2025 19:10:33 GMT