Threat database

48 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	10.0	EPSS 0.5%	CVE-2025-12422BLU-IC2 · Path Traversal Critical10.0EPSS 0.5%2025-10-28CVE Database V5CVE-2025-12422 Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.5%Vulnerability Azure Access Technology #cwe-22 Germany+6	CVE Database V5	2025-10-28
Medium	6.9	EPSS 0.3%	CVE-2025-12365BLU-IC2 · Generation of Error Message Containing Sensitive Information Medium6.9EPSS 0.3%2025-10-27CVE Database V5CVE-2025-12365 Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-209 Germany+5	CVE Database V5	2025-10-27
Critical	10.0	EPSS 0.3%	CVE-2025-12364BLU-IC2 · Weak Password Requirements Critical10.0EPSS 0.3%2025-10-27CVE Database V5CVE-2025-12364 Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-521 Germany+5	CVE Database V5	2025-10-27
Critical	10.0	EPSS 0.3%	CVE-2025-12363BLU-IC2 · Exposure of Sensitive Information to an Unauthorized Actor Critical10.0EPSS 0.3%2025-10-27CVE Database V5CVE-2025-12363 Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-200 Germany+6	CVE Database V5	2025-10-27
Critical	10.0	EPSS 0.3%	CVE-2025-12285BLU-IC2 · Improper Input Validation Critical10.0EPSS 0.3%2025-10-26CVE Database V5CVE-2025-12285 Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-20 Germany+6	CVE Database V5	2025-10-26
Medium	6.9	EPSS 0.2%	CVE-2025-12284BLU-IC2 · Improper Input Validation Medium6.9EPSS 0.2%2025-10-26CVE Database V5CVE-2025-12284 Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.2%Vulnerability Azure Access Technology #cwe-20 Germany+7	CVE Database V5	2025-10-26
Critical	10.0	EPSS 0.5%	CVE-2025-12275BLU-IC2 · Improper Input Validation Critical10.0EPSS 0.5%2025-10-26CVE Database V5CVE-2025-12275 Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.5%Vulnerability Azure Access Technology #cwe-20 Germany+5	CVE Database V5	2025-10-26
Medium	6.9	EPSS 0.2%	CVE-2025-12278BLU-IC2 · Improper Input Validation Medium6.9EPSS 0.2%2025-10-26CVE Database V5CVE-2025-12278 Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.2%Vulnerability Azure Access Technology #cwe-20 Germany+5	CVE Database V5	2025-10-26
Low	2.1	EPSS 0.2%	CVE-2025-12221BLU-IC2 · Common Vulnerabilities in Software Configuration Low2.1EPSS 0.2%2025-10-25CVE Database V5CVE-2025-12221 Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.2%Vulnerability Azure Access Technology #cwe-16 Germany+4	CVE Database V5	2025-10-25
Critical	10.0	EPSS 0.4%	CVE-2025-12220BLU-IC2 · Dependency on Vulnerable Third-Party Component Critical10.0EPSS 0.4%2025-10-25CVE Database V5CVE-2025-12220 Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.4%Vulnerability Azure Access Technology #cwe-1395 Germany+5	CVE Database V5	2025-10-25
Critical	10.0	EPSS 0.4%	CVE-2025-12219BLU-IC2 · Dependency on Vulnerable Third-Party Component Critical10.0EPSS 0.4%2025-10-25CVE Database V5CVE-2025-12219 Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.4%Vulnerability Azure Access Technology #cwe-1395 Germany+5	CVE Database V5	2025-10-25
Critical	10.0	EPSS 0.3%	CVE-2025-12218BLU-IC2 · Use of Default Credentials Critical10.0EPSS 0.3%2025-10-25CVE Database V5CVE-2025-12218 Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-1392 Germany+6	CVE Database V5	2025-10-25
Medium	6.9	EPSS 0.3%	CVE-2025-12217BLU-IC2 · Use of Default Credentials Medium6.9EPSS 0.3%2025-10-25CVE Database V5CVE-2025-12217 SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-1392 Germany+5	CVE Database V5	2025-10-25
Critical	10.0	EPSS 0.2%	CVE-2025-12216BLU-IC2 · Insufficient or Incomplete Data Removal within Hardware Component Critical10.0EPSS 0.2%2025-10-25CVE Database V5CVE-2025-12216 Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.2%Vulnerability Azure Access Technology #cwe-1301 Germany+6	CVE Database V5	2025-10-25
Critical	10.0	EPSS 0.3%	CVE-2025-12176BLU-IC2 · Inclusion of Undocumented Features or Chicken Bits Critical10.0EPSS 0.3%2025-10-24CVE Database V5CVE-2025-12176 Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-1242 Germany+5	CVE Database V5	2025-10-24
Medium	5.2	EPSS 0.1%	CVE-2025-12114BLU-IC2 · On-Chip Debug and Test Interface With Improper Access Control Medium5.2EPSS 0.1%2025-10-23CVE Database V5CVE-2025-12114 Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.1%Vulnerability Azure Access Technology #cwe-1191 Germany+7	CVE Database V5	2025-10-23
Critical	10.0	EPSS 0.4%	CVE-2025-12104BLU-IC2 · Use of Unmaintained Third Party Components Critical10.0EPSS 0.4%2025-10-23CVE Database V5CVE-2025-12104 Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.4%Vulnerability Azure Access Technology #cwe-1104 Germany+9	CVE Database V5	2025-10-23
Medium	5.3	EPSS 0.2%	CVE-2025-12031BLU-IC2 · Sensitive Cookie Without 'HttpOnly' Flag Medium5.3EPSS 0.2%2025-10-21CVE Database V5CVE-2025-12031 HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.2%Vulnerability Azure Access Technology #cwe-1004 Germany+6	CVE Database V5	2025-10-21
Critical	10.0	EPSS 0.2%	CVE-2025-12001BLU-IC2 · Improper Input Validation Critical10.0EPSS 0.2%2025-10-20CVE Database V5CVE-2025-12001 Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.2%Vulnerability Azure Access Technology #cwe-20 Germany+6	CVE Database V5	2025-10-20
Critical	10.0	EPSS 0.3%	CVE-2025-11925BLU-IC2 · Improper Check for Unusual or Exceptional Conditions Critical10.0EPSS 0.3%2025-10-17CVE Database V5CVE-2025-11925 Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.3%Vulnerability Azure Access Technology #cwe-754 Germany+5	CVE Database V5	2025-10-17

Showing 21–40 of 48 results