BLU-IC2 vulnerabilities

3 known vulnerabilities in BLU-IC2 from Azure Access Technology. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  BLU-IC2: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-12422Oct 28, 2025Azure Access Technology

  Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

• 9.8 Critical severity

  BLU-IC2: Inclusion of Undocumented Features or Chicken Bits

  CVE-2025-12176Oct 24, 2025Azure Access Technology

  Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

• 9.8 Critical severity

  BLU-IC2: Allocation of Resources Without Limits or Throttling

  CVE-2025-11832Oct 15, 2025Azure Access Technology

  Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.