Browse CVEs

CRITICAL 9.8 CVE-2025-12603 /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-11-01 CRITICAL 9.8 CVE-2025-12599 Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-11-01 CRITICAL 9.8 CVE-2025-12600 Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-11-01 CRITICAL 9.8 CVE-2025-12602 /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-11-01 HIGH 7.5 CVE-2025-12601 Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $1,9502025-11-01 CRITICAL 9.8 CVE-2025-12553 Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-31 CRITICAL 9.8 CVE-2025-12554 Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-31 CRITICAL 9.8 CVE-2025-12552 Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-31 CRITICAL 9.8 CVE-2025-12516 Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-30 MEDIUM 5.3 CVE-2025-12517 Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $1,6002025-10-30 CRITICAL 9.8 CVE-2025-12515 Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic4 Firmware 1.20+ Fix from $2,3002025-10-30 HIGH 8.8 CVE-2025-12479 Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $1,9502025-10-29 CRITICAL 9.8 CVE-2025-12476 Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-29 CRITICAL 9.8 CVE-2025-12477 Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-29 CRITICAL 9.8 CVE-2025-12478 Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-29 CRITICAL 9.8 CVE-2025-12424 Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-28 HIGH 7.8 CVE-2025-12425 Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $1,9502025-10-28 HIGH 7.5 CVE-2025-12423 Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . Blu Ic2 Firmware 1.20+ Fix from $1,9502025-10-28 CRITICAL 9.8 CVE-2025-12422 Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; B… Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-28 MEDIUM 5.3 CVE-2025-12365 Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $1,6002025-10-27 CRITICAL 9.8 CVE-2025-12364 Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-27 HIGH 7.5 CVE-2025-12363 Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $1,9502025-10-27 CRITICAL 9.8 CVE-2025-12285 Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-26 MEDIUM 6.5 CVE-2025-12278 Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $1,6002025-10-26 MEDIUM 6.1 CVE-2025-12284 Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $1,6002025-10-26 CRITICAL 9.8 CVE-2025-12275 Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-26 CRITICAL 9.8 CVE-2025-12219 Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-25 CRITICAL 9.8 CVE-2025-12220 Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-25 CRITICAL 9.1 CVE-2025-12217 SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-25 CRITICAL 9.1 CVE-2025-12218 Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Blu Ic2 Firmware 1.20+ Fix from $2,3002025-10-25