Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

BLU-IC2 and BLU-IC4: Unhandled Errors Can Crash Devices

CVE-2025-12516 · published 1 year ago
Summary

If an error occurs, these devices may shut down unexpectedly, causing service disruptions. This is a concern for businesses that rely on these devices for operations. Regular updates and monitoring are recommended to prevent these issues.

What to do
  • Update azure-access blu-ic2_firmware to version 1.20 or later.
  • Update azure-access blu-ic4_firmware to version 1.20 or later.
Affected software
VendorProductAffected versions
azure-access blu-ic2_firmware < 1.20
cpe:2.3:o:azure-access:blu-ic2_firmware:*:*:*:*:*:*:*:*
azure-access blu-ic4_firmware < 1.20
cpe:2.3:o:azure-access:blu-ic4_firmware:*:*:*:*:*:*:*:*
Original advisory text
Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-394Unexpected Status Code or Return Value
Timeline
Published30 Oct 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-12516 · NVD
Track software like this
Free during beta