CVE-2025-12221

HIGH
Published Oct 25, 2025 Modified Nov 7, 2025 CWE-16 CWE-352

Description

Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Is your site exposed to CVE-2025-12221?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-16 CWE-16
CWE-352 Cross-Site Request Forgery

Affected Products

Vendor Product
azure-access blu-ic2_firmware
azure-access blu-ic2
azure-access blu-ic4_firmware
azure-access blu-ic4

References

Frequently Asked Questions

What is CVE-2025-12221? +
Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. It has a CVSS v3.1 base score of 8.8 (HIGH).
How severe is CVE-2025-12221? +
CVE-2025-12221 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2025-12221? +
CVE-2025-12221 affects products from azure-access, specifically: blu-ic2, blu-ic2_firmware, blu-ic4, blu-ic4_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-12221? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-46909 9.8

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the …
CVE-2018-11922 9.8

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
CVE-2023-33105 7.5

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction …
CVE-2024-32991 7.5

Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-42031 7.5

Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-52719 7.1

Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-12221 — free, no signup required.