Azure Access Technology BLU-IC2

• CVE-2025-12603 Low 2.3 /etc/timezone can be Arbitrarily Written 0.3%
• CVE-2025-12602 Low 2.3 /etc/avahi/services/z9.service can be Arbitrarily Written 0.3%
• CVE-2025-12601 Critical 10.0 Denial of Service Due to SlowLoris 0.3%
• CVE-2025-12600 Critical 10.0 Web UI Malfunction 0.4%
• CVE-2025-12599 Critical 10.0 Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000) 0.4%
• CVE-2025-12554 Medium 6.9 Missing Security Headers 0.4%
• CVE-2025-12553 Critical 10.0 Server Certificate Verification Disabled 0.2%
• CVE-2025-12552 Medium 6.9 Insufficient Password Policy 0.3%
• CVE-2025-12517 Low 2.1 Credits Page not Matching Versions in Use in the Firmware 0.2%
• CVE-2025-12516 Critical 10.0 Lack of Graceful Error Handling - HTTP 5xx Error 0.4%
• CVE-2025-12515 Critical 10.0 Systemic Internal Server Errors - HTTP 500 Response 0.4%
• CVE-2025-12479 Critical 10.0 Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation 0.2%
• CVE-2025-12478 Critical 10.0 Non-Compliant TLS Configuration 0.2%
• CVE-2025-12477 Critical 10.0 Server Version Disclosure 0.3%
• CVE-2025-12476 Critical 10.0 Resource Lacking AuthN 0.3%
• CVE-2025-12425 Critical 10.0 Local Privilege Escalation 0.2%
• CVE-2025-12424 Critical 10.0 Privilege Escalation through SUID-bit Binary 0.3%
• CVE-2025-12423 Critical 10.0 Denial of Service - Protocol Manipulation 0.3%
• CVE-2025-12422 Critical 10.0 Vulnerable Upgrade Feature (Arbitrary File Write) 0.5%
• CVE-2025-12365 Medium 6.9 Error Messages Wrapped In HTTP Header 0.3%
• CVE-2025-12364 Critical 10.0 Weak Password Policy 0.3%
• CVE-2025-12363 Critical 10.0 Email Password Disclosure 0.3%
• CVE-2025-12285 Critical 10.0 Missing Initial Password Change 0.3%
• CVE-2025-12284 Medium 6.9 Lack of Input Validation 0.2%
• CVE-2025-12275 Critical 10.0 Mail Configuration File Manipulation + Command Execution 0.5%
• CVE-2025-12278 Medium 6.9 Logout Functionality not Working 0.2%
• CVE-2025-12221 Low 2.1 CSRF Token not Properly Implemented 0.2%
• CVE-2025-12220 Critical 10.0 Busybox 1.31.1 - Multiple Known Vulnerabilities 0.4%
• CVE-2025-12219 Critical 10.0 Vulnerable Components in Azure Access OS 0.4%
• CVE-2025-12218 Critical 10.0 Weak Default Credentials 0.3%
• CVE-2025-12217 Medium 6.9 SNMP Default Community String (public) 0.3%
• CVE-2025-12216 Critical 10.0 Malicious / Malformed App can be Installed but not Uninstalled 0.2%
• CVE-2025-12176 Critical 10.0 Undocumented Administrative Accounts 0.3%
• CVE-2025-12114 Medium 5.2 Serial Console Enabled 0.1%
• CVE-2025-12104 Critical 10.0 Incorrect Content-Type Header 0.4%
• CVE-2025-12031 Medium 5.3 HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute 0.2%
• CVE-2025-12001 Critical 10.0 Incorrect Content-Type Header 0.2%
• CVE-2025-11925 Critical 10.0 Incorrect Content-Type Header 0.3%
• CVE-2025-11832 Critical 10.0 APIs Lack Rate Limiting 0.4%