CVE-2025-12219criticalCWE-1395

CVE-2025-12219: critical vulnerability in Azure Access Technology BLU-IC2

Vulnerable Components in Azure Access OS

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 0.4%
In short

Azure Access OS contains vulnerable components that can be exploited to compromise system security. This affects specific versions of BLU-IC2 and BLU-IC4 up to version 1.19.5, potentially allowing attackers to gain unauthorized access or control.

Technical detail

Vulnerable components in Azure Access OS (BLU-IC2 and BLU-IC4 versions ≤1.19.5) introduce critical weaknesses exploitable through network or local vectors. The vulnerability allows unauthorized access or privilege escalation depending on component exposure and attack surface.

Summary generated and translated by AI from the official description.
Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H