CVE-2025-12219: critical vulnerability in Azure Access Technology BLU-IC2
Vulnerable Components in Azure Access OS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Azure Access OS contains vulnerable components that can be exploited to compromise system security. This affects specific versions of BLU-IC2 and BLU-IC4 up to version 1.19.5, potentially allowing attackers to gain unauthorized access or control.
Vulnerable components in Azure Access OS (BLU-IC2 and BLU-IC4 versions ≤1.19.5) introduce critical weaknesses exploitable through network or local vectors. The vulnerability allows unauthorized access or privilege escalation depending on component exposure and attack surface.
In the same product, most dangerous first.