CVE-2025-12218 is a critical vulnerability involving weak default credentials in BLU-IC2 and BLU-IC4 devices up to version 1.19.5. This weakness allows unauthenticated remote attackers to gain high-impact access, compromising confidentiality and integrity without requiring user interaction.