CVE-2025-12221

HIGH

Published Oct 25, 2025 Modified Nov 7, 2025 CWE-16 CWE-352

Description

Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Is your site exposed to CVE-2025-12221?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-16 CWE-16

CWE-352 Cross-Site Request Forgery

Affected Products

Vendor	Product	Versions
azure-access	blu-ic2_firmware	< 1.20
azure-access	blu-ic2	All
azure-access	blu-ic4_firmware	< 1.20
azure-access	blu-ic4	All

References

Advisories & Patches

https://azure-access.com/security-advisories

Frequently Asked Questions

What is CVE-2025-12221? +

Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. It has a CVSS v3.1 base score of 8.8 (HIGH).

How severe is CVE-2025-12221? +

CVE-2025-12221 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-12221? +

CVE-2025-12221 affects products from azure-access, specifically: blu-ic2, blu-ic2_firmware, blu-ic4, blu-ic4_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-12221? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2018-11922 9.8

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

CVE-2024-46909 9.8

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the …

CVE-2024-32991 7.5

Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.

CVE-2024-42031 7.5

Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2023-33105 7.5

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction …

CVE-2023-52719 7.1

Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.