azure-access blu-ic2 firmware

Name: azure-access blu-ic2 firmware
Brand: azure-access

productUS

cpe:2.3:o:azure-access:blu-ic2_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

24critical6high9medium0low

updated 2026-10-24

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-11832US	critical9.8	0.37% (30th)	Exploit	1.20	2025-10-15	< 1.20
CVE-2025-12275US	critical9.8	0.54% (45th)	—	1.20	2025-10-26	< 1.20
CVE-2025-12422US	critical9.8	0.48% (41st)	—	1.20	2025-10-28	< 1.20
CVE-2025-12599US	critical9.8OT elevated	0.43% (36th)	—	1.20	2025-11-01	< 1.20
CVE-2025-12104US	critical9.8	0.41% (34th)	—	1.20	2025-10-23	< 1.20
CVE-2025-12600US	critical9.8	0.37% (30th)	—	1.20	2025-11-01	< 1.20
CVE-2025-12554US	critical9.8	0.37% (30th)	—	1.20	2025-10-31	< 1.20
CVE-2025-12516US	critical9.8	0.37% (30th)	—	1.20	2025-10-30	< 1.20
CVE-2025-12515US	critical9.8	0.37% (30th)	—	1.20	2025-10-30	< 1.20
CVE-2025-12220US	critical9.8	0.37% (30th)	—	1.20	2025-10-25	< 1.20
CVE-2025-12219US	critical9.8	0.37% (30th)	—	1.20	2025-10-25	< 1.20
CVE-2025-12477US	critical9.8OT elevated	0.35% (27th)	—	1.20	2025-10-29	< 1.20
CVE-2025-12552US	critical9.8	0.34% (26th)	—	1.20	2025-10-31	< 1.20
CVE-2025-12476US	critical9.8OT elevated	0.34% (26th)	—	1.20	2025-10-29	< 1.20
CVE-2025-12424US	critical9.8	0.34% (26th)	—	1.20	2025-10-28	< 1.20
CVE-2025-12364US	critical9.8	0.34% (26th)	—	1.20	2025-10-27	< 1.20
CVE-2025-12285US	critical9.8	0.34% (27th)	—	1.20	2025-10-26	< 1.20
CVE-2025-12176US	critical9.8	0.34% (26th)	—	1.20	2025-10-24	< 1.20
CVE-2025-12601US	high7.5	0.34% (26th)	—	1.20	2025-11-01	< 1.20
CVE-2025-12423US	high7.5	0.34% (26th)	—	1.20	2025-10-28	< 1.20
CVE-2025-12363US	high7.5	0.32% (23rd)	—	1.20	2025-10-27	< 1.20
CVE-2025-12603US	critical9.8	0.30% (21st)	—	1.20	2025-11-01	< 1.20
CVE-2025-12602US	critical9.8	0.30% (21st)	—	1.20	2025-11-01	< 1.20
CVE-2025-12218US	critical9.1OT elevated	0.30% (21st)	—	1.20	2025-10-25	< 1.20
CVE-2025-12217US	critical9.1OT elevated	0.30% (21st)	—	1.20	2025-10-25	< 1.20
CVE-2025-11925US	medium6.1	0.26% (16th)	—	1.20	2025-10-17	< 1.20
CVE-2025-12365US	medium5.3	0.25% (16th)	—	1.20	2025-10-27	< 1.20
CVE-2025-12478US	critical9.8	0.24% (15th)	—	1.20	2025-10-29	< 1.20
CVE-2025-12553US	critical9.8	0.22% (12th)	—	1.20	2025-10-31	< 1.20
CVE-2025-12425US	high7.8	0.22% (12th)	—	1.20	2025-10-28	< 1.20
CVE-2025-12216US	medium5.5	0.22% (12th)	—	1.20	2025-10-25	< 1.20
CVE-2025-12517US	medium5.3	0.21% (10th)	—	1.20	2025-10-30	< 1.20
CVE-2025-12031US	medium5.3	0.21% (10th)	—	1.20	2025-10-21	< 1.20
CVE-2025-12278US	medium6.5	0.20% (10th)	—	1.20	2025-10-26	< 1.20
CVE-2025-12284US	medium6.1	0.19% (9th)	—	1.20	2025-10-26	< 1.20
CVE-2025-12001US	medium6.1	0.19% (9th)	—	1.20	2025-10-20	< 1.20
CVE-2025-12479US	high8.8	0.17% (6th)	—	1.20	2025-10-29	< 1.20
CVE-2025-12221US	high8.8	0.17% (6th)	—	1.20	2025-10-25	< 1.20
CVE-2025-12114US	medium5.5	0.11% (1st)	—	1.20	2025-10-23	< 1.20

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-521Weak Password Requirements3 CVEs
CWE-1392Use of Default Credentials2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-394Unexpected Status Code or Return Value2 CVEs
CWE-730CWE-7302 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan