CVE-2025-12285 is a critical vulnerability affecting BLU-IC2 and BLU-IC4 devices up to version 1.19.5, where the initial password change is missing. This flaw allows an attacker to access the device with default or initial credentials, potentially leading to full compromise.