azure-access

Azure Access Technology

CVEs, 365 days3839 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationAzure Access Technology
RoleCNA
TypeVendor
Reports toicscert → CISA
ScopeAzure Access branded products and technologies only.
Advisorieshttps://azure-access.com/security-advisories
  • CVE-2025-12603 2025-11-01 · CVSS 2.3
    /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12602 2025-11-01 · CVSS 2.3
    /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12601 2025-11-01 · CVSS 10.0
    Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12600 2025-11-01 · CVSS 10.0
    Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12599 2025-11-01 · CVSS 10.0
    Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12554 2025-10-31 · CVSS 6.9
    Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12553 2025-10-31 · CVSS 10.0
    Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12552 2025-10-31 · CVSS 6.9
    Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12517 2025-10-30 · CVSS 2.1
    Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12516 2025-10-30 · CVSS 10.0
    Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12515 2025-10-30 · CVSS 10.0
    Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12479 2025-10-29 · CVSS 10.0
    Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12478 2025-10-29 · CVSS 10.0
    Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12477 2025-10-29 · CVSS 10.0
    Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12476 2025-10-29 · CVSS 10.0
    Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12425 2025-10-28 · CVSS 10.0
    Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12424 2025-10-28 · CVSS 10.0
    Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12423 2025-10-28 · CVSS 10.0
    Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
  • CVE-2025-12422 2025-10-28 · CVSS 10.0
    Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: thr
  • CVE-2025-12365 2025-10-27 · CVSS 6.9
    Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12364 2025-10-27 · CVSS 10.0
    Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12363 2025-10-27 · CVSS 10.0
    Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12285 2025-10-26 · CVSS 10.0
    Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12284 2025-10-26 · CVSS 6.9
    Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
  • CVE-2025-12275 2025-10-26 · CVSS 10.0
    Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

All CVE Program partners