CVE-2025-12364
CRITICALDescription
Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| azure-access | blu-ic2_firmware |
| azure-access | blu-ic2 |
| azure-access | blu-ic4_firmware |
| azure-access | blu-ic4 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-12364? +
How severe is CVE-2025-12364? +
What products are affected by CVE-2025-12364? +
How do I check if I'm vulnerable to CVE-2025-12364? +
Related Vulnerabilities
Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After …
No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console …
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through …
KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any …
QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web …
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over …