azure-access records
39 published records for vendor azure-access.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation5
- CWE-521 Weak Password Requirements2
- CWE-269 Improper Privilege Management2
- CWE-306 Missing Authentication for Critical Function2
- CWE-1392 Use of Default Credentials2
- CWE-1395 Dependency on Vulnerable Third-Party Component2
The weakness classes this vendor ships most often: where to look.
CWEAll records
39 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-12275No exploit | Mail Configuration File Manipulation + Command Executionazure-access · blu-ic2 firmware · CWE-20 | Critical10.0 | — | 0.5% | Oct 26, 2025 |
40Plan | CVE-2025-12422No exploit | Vulnerable Upgrade Feature (Arbitrary File Write)azure-access · blu-ic2 firmware · CWE-22 | Critical10.0 | — | 0.4% | Oct 28, 2025 |
40Plan | CVE-2025-12599No exploit | Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)azure-access · blu-ic2 firmware · CWE-321 | Critical10.0 | — | 0.4% | Nov 1, 2025 |
40Plan | CVE-2025-12104No exploit | Incorrect Content-Type Headerazure-access · blu-ic2 firmware · CWE-1104 | Critical10.0 | — | 0.4% | Oct 23, 2025 |
40Plan | CVE-2025-12515No exploit | Systemic Internal Server Errors - HTTP 500 Responseazure-access · blu-ic4 firmware · CWE-394 | Critical10.0 | — | 0.3% | Oct 30, 2025 |
40Plan | CVE-2025-12219No exploit | Vulnerable Components in Azure Access OSazure-access · blu-ic2 firmware · CWE-1395 | Critical10.0 | — | 0.3% | Oct 25, 2025 |
40Plan | CVE-2025-12516No exploit | Lack of Graceful Error Handling - HTTP 5xx Errorazure-access · blu-ic2 firmware · CWE-394 | Critical10.0 | — | 0.3% | Oct 30, 2025 |
40Plan | CVE-2025-11832Proof of concept | APIs Lack Rate Limitingazure-access · blu-ic2 firmware · CWE-770 | Critical10.0 | — | 0.3% | Oct 15, 2025 |
40Plan | CVE-2025-12600No exploit | Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.azure-access · blu-ic2 firmware · CWE-730 | Critical10.0 | — | 0.3% | Nov 1, 2025 |
40Plan | CVE-2025-12220No exploit | Busybox 1.31.1 - Multiple Known Vulnerabilitiesazure-access · blu-ic2 firmware · CWE-1395 | Critical10.0 | — | 0.3% | Oct 25, 2025 |
40Plan | CVE-2025-12477No exploit | Server Version Disclosureazure-access · blu-ic2 firmware · CWE-306 | Critical10.0 | — | 0.3% | Oct 29, 2025 |
40Plan | CVE-2025-12424No exploit | Privilege Escalation through SUID-bit Binaryazure-access · blu-ic2 firmware · CWE-269 | Critical10.0 | — | 0.3% | Oct 28, 2025 |
40Plan | CVE-2025-12176No exploit | Undocumented Administrative Accountsazure-access · blu-ic2 firmware · CWE-1242 | Critical10.0 | — | 0.3% | Oct 24, 2025 |
40Plan | CVE-2025-12476No exploit | Resource Lacking AuthNazure-access · blu-ic2 firmware · CWE-306 | Critical10.0 | — | 0.3% | Oct 29, 2025 |
40Plan | CVE-2025-12285No exploit | Missing Initial Password Changeazure-access · blu-ic2 firmware · CWE-20 | Critical10.0 | — | 0.3% | Oct 26, 2025 |
40Plan | CVE-2025-12364No exploit | Weak Password Policyazure-access · blu-ic2 firmware · CWE-521 | Critical10.0 | — | 0.3% | Oct 27, 2025 |
40Plan | CVE-2025-12423No exploit | Denial of Service - Protocol Manipulationazure-access · blu-ic2 firmware · CWE-248 | Critical10.0 | — | 0.3% | Oct 28, 2025 |
40Plan | CVE-2025-12601No exploit | Denial of Service Due to SlowLorisazure-access · blu-ic2 firmware · CWE-730 | Critical10.0 | — | 0.3% | Nov 1, 2025 |
40Plan | CVE-2025-12363No exploit | Email Password Disclosureazure-access · blu-ic2 firmware · CWE-200 | Critical10.0 | — | 0.3% | Oct 27, 2025 |
40Plan | CVE-2025-12218No exploit | Weak Default Credentialsazure-access · blu-ic2 firmware · CWE-1392 | Critical10.0 | — | 0.2% | Oct 25, 2025 |
40Plan | CVE-2025-11925No exploit | Incorrect Content-Type Headerazure-access · blu-ic2 firmware · CWE-754 | Critical10.0 | — | 0.2% | Oct 17, 2025 |
40Plan | CVE-2025-12478No exploit | Non-Compliant TLS Configurationazure-access · blu-ic2 firmware · CWE-326 | Critical10.0 | — | 0.2% | Oct 29, 2025 |
40Plan | CVE-2025-12553No exploit | Server Certificate Verification Disabledazure-access · blu-ic2 firmware · CWE-599 | Critical10.0 | — | 0.2% | Oct 31, 2025 |
40Plan | CVE-2025-12425No exploit | Local Privilege Escalationazure-access · blu-ic2 firmware · CWE-269 | Critical10.0 | — | 0.2% | Oct 28, 2025 |
40Plan | CVE-2025-12216No exploit | Malicious / Malformed App can be Installed but not Uninstalledazure-access · blu-ic2 firmware · CWE-1301 | Critical10.0 | — | 0.2% | Oct 25, 2025 |
- CVE-2025-1227540Plan
Mail Configuration File Manipulation + Command Execution
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 26, 2025
- CVE-2025-1242240Plan
Vulnerable Upgrade Feature (Arbitrary File Write)
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 28, 2025
- CVE-2025-1259940Plan
Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareNov 1, 2025
- CVE-2025-1210440Plan
Incorrect Content-Type Header
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 23, 2025
- CVE-2025-1251540Plan
Systemic Internal Server Errors - HTTP 500 Response
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic4 firmwareOct 30, 2025
- CVE-2025-1221940Plan
Vulnerable Components in Azure Access OS
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 25, 2025
- CVE-2025-1251640Plan
Lack of Graceful Error Handling - HTTP 5xx Error
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 30, 2025
- CVE-2025-1183240Plan
APIs Lack Rate Limiting
CriticalCVSS 10.0Proof of conceptEPSS 0%azure-access · blu-ic2 firmwareOct 15, 2025
- CVE-2025-1260040Plan
Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareNov 1, 2025
- CVE-2025-1222040Plan
Busybox 1.31.1 - Multiple Known Vulnerabilities
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 25, 2025
- CVE-2025-1247740Plan
Server Version Disclosure
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 29, 2025
- CVE-2025-1242440Plan
Privilege Escalation through SUID-bit Binary
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 28, 2025
- CVE-2025-1217640Plan
Undocumented Administrative Accounts
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 24, 2025
- CVE-2025-1247640Plan
Resource Lacking AuthN
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 29, 2025
- CVE-2025-1228540Plan
Missing Initial Password Change
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 26, 2025
- CVE-2025-1236440Plan
Weak Password Policy
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 27, 2025
- CVE-2025-1242340Plan
Denial of Service - Protocol Manipulation
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 28, 2025
- CVE-2025-1260140Plan
Denial of Service Due to SlowLoris
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareNov 1, 2025
- CVE-2025-1236340Plan
Email Password Disclosure
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 27, 2025
- CVE-2025-1221840Plan
Weak Default Credentials
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 25, 2025
- CVE-2025-1192540Plan
Incorrect Content-Type Header
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 17, 2025
- CVE-2025-1247840Plan
Non-Compliant TLS Configuration
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 29, 2025
- CVE-2025-1255340Plan
Server Certificate Verification Disabled
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 31, 2025
- CVE-2025-1242540Plan
Local Privilege Escalation
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 28, 2025
- CVE-2025-1221640Plan
Malicious / Malformed App can be Installed but not Uninstalled
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 25, 2025