Search
Search Results (36 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-12284 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-28 | N/A |
| Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12275 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-28 | N/A |
| Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12278 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-28 | N/A |
| Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12221 | 2 Azure Access Technology, Busybox | 3 Blu-ic2, Blu-ic4, Busybox | 2025-10-28 | N/A |
| Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12220 | 2 Azure Access Technology, Busybox | 3 Blu-ic2, Blu-ic4, Busybox | 2025-10-28 | N/A |
| Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12219 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-28 | N/A |
| Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12218 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-28 | N/A |
| Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12217 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-28 | N/A |
| SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12216 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-28 | N/A |
| Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12176 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-27 | N/A |
| Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12104 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-27 | N/A |
| Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12114 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-27 | N/A |
| Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12001 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-26 | N/A |
| Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-12031 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-23 | N/A |
| HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-11925 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-21 | N/A |
| Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||
| CVE-2025-11832 | 1 Azure Access Technology | 2 Blu-ic2, Blu-ic4 | 2025-10-21 | N/A |
| Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | ||||