CVE-2025-12601

HIGH

Published Nov 1, 2025 Modified Nov 10, 2025 CWE-730

Description

Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-730 CWE-730

Affected Products

Vendor	Product	Versions
azure-access	blu-ic2_firmware	< 1.20
azure-access	blu-ic2	All
azure-access	blu-ic4_firmware	< 1.20
azure-access	blu-ic4	All

References

Advisories & Patches

https://azure-access.com/security-advisories

Frequently Asked Questions

What is CVE-2025-12601? +

Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2025-12601? +

CVE-2025-12601 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-12601? +

CVE-2025-12601 affects products from azure-access, specifically: blu-ic2, blu-ic2_firmware, blu-ic4, blu-ic4_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-12601? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-12600 9.8

Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVE-2025-11832 9.8

Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue …

CVE-2025-12515 9.8

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVE-2025-12516 9.8

Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CVE-2025-12285 9.8

Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVE-2025-12422 9.8

Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; …