CVE-2025-12552 is a critical vulnerability involving an insufficient password policy in BLU-IC2 and BLU-IC4 products up to version 1.19.5. The weakness relates to inadequate enforcement of password complexity or strength requirements, potentially allowing attackers to compromise accounts more easily.