Lack of Graceful Error Handling - HTTP 5xx Error
No sign of exploitation. No public exploitation artifact known so far.
The BLU-IC2 and BLU-IC4 devices fail to handle server errors gracefully, returning raw HTTP 5xx errors that expose internal system details to attackers. This allows unauthorized disclosure of sensitive information about the device's internal structure and operation.
The affected BLU-IC2 (≤1.19.5) and BLU-IC4 (≤1.19.5) devices lack proper error handling for server-side failures, resulting in unfiltered HTTP 5xx responses that leak internal implementation details. An unauthenticated remote attacker can trigger these errors through normal requests to obtain information useful for further exploitation. The absence of error sanitization creates an information disclosure vulnerability enabling reconnaissance.