Serial Console Enabled
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.2epss 0.1%
exploitation probability
0.1%top 99% of all CVEs
observed exploitation
nono source reports it
In short
The serial console is left enabled on affected devices, potentially exposing sensitive information that attackers could use to discover other vulnerabilities in the system.
Technical detail
An enabled serial console (CWE-1191: Information Exposure Through Serialized Data) allows unauthenticated access to debug output and system information via serial interface, facilitating reconnaissance for further exploitation. This affects BLU-IC2 and BLU-IC4 firmware versions up to 1.19.5.
Summary generated and translated by AI from the official description.
Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H