Threats affecting pkg:npm/azure-access-technology/blu-ic2

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	10.0	EPSS 0.2%	CVE-2025-12478Azure Access Technology BLU-IC2 · Inadequate Encryption Strength Critical10.0EPSS 0.2%2025-10-29CVE Database V5CVE-2025-12478 Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . EPSS 0.2%Vulnerability CWE-326	CVE Database V5	2025-10-29
Medium	5.2	EPSS 0.1%	CVE-2025-12114Azure Access Technology BLU-IC2 · On-Chip Debug and Test Interface With Improper Access Control Medium5.2EPSS 0.1%2025-10-23CVE Database V5CVE-2025-12114 Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.1%Vulnerability CWE-1191	CVE Database V5	2025-10-23
Critical	10.0	EPSS 0.4%	CVE-2025-12104Azure Access Technology BLU-IC2 · Use of Unmaintained Third Party Components Critical10.0EPSS 0.4%2025-10-23CVE Database V5CVE-2025-12104 Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. EPSS 0.4%Vulnerability CWE-1104	CVE Database V5	2025-10-23

Page 1 of 1