{"schema_version":1,"title":"Azure-Access vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 37 vulnerabilities in Azure-Access: 0 in the last 7 days and 0 in the last 90 days, 23 of them critical and 0 exploited in the wild. The most recent, CVE-2025-12603, was published on 1 November 2025. 4 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/azure-access","json_url":"https://junglewise.ai/threats/vendors/azure-access.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/azure-access","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":6,"all_time":37,"critical":23,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"cve":"CVE-2025-12603","cvss":9.8,"epss":0.003,"slug":"cve-2025-12603-etc-timezone-can-be-arbitrarily-written-this-issue-affects-blu","title":"/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-11-01T19:15:39.04+00:00","url":"https://junglewise.ai/threats/cve-2025-12603-etc-timezone-can-be-arbitrarily-written-this-issue-affects-blu"},{"cve":"CVE-2025-12602","cvss":9.8,"epss":0.003,"slug":"cve-2025-12602-etc-avahi-services-z9-service-can-be-arbitrarily-written-this","title":"/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-11-01T19:15:38.86+00:00","url":"https://junglewise.ai/threats/cve-2025-12602-etc-avahi-services-z9-service-can-be-arbitrarily-written-this"},{"cve":"CVE-2025-12601","cvss":7.5,"epss":0.0034,"slug":"cve-2025-12601-denial-of-service-due-to-slowloris-this-issue-affects-blu-ic2","title":"Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"high","exploited":false,"published_at":"2025-11-01T19:15:38.723+00:00","url":"https://junglewise.ai/threats/cve-2025-12601-denial-of-service-due-to-slowloris-this-issue-affects-blu-ic2"},{"cve":"CVE-2025-12600","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12600-web-ui-malfunction-when-setting-unexpected-locale-via-api-this","title":"Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-11-01T19:15:38.58+00:00","url":"https://junglewise.ai/threats/cve-2025-12600-web-ui-malfunction-when-setting-unexpected-locale-via-api-this"},{"cve":"CVE-2025-12599","cvss":9.8,"epss":0.0043,"slug":"cve-2025-12599-multiple-devices-are-sharing-the-same-secrets-for-sdksocket-tcp","title":"Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-11-01T19:15:38.41+00:00","url":"https://junglewise.ai/threats/cve-2025-12599-multiple-devices-are-sharing-the-same-secrets-for-sdksocket-tcp"},{"cve":"CVE-2025-12554","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12554-missing-security-headers-this-issue-affects-blu-ic2-through-1-19","title":"Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-31T16:15:40.17+00:00","url":"https://junglewise.ai/threats/cve-2025-12554-missing-security-headers-this-issue-affects-blu-ic2-through-1-19"},{"cve":"CVE-2025-12553","cvss":9.8,"epss":0.0022,"slug":"cve-2025-12553-email-server-certificate-verification-disabled-this-issue-affects","title":"Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-31T16:15:40.033+00:00","url":"https://junglewise.ai/threats/cve-2025-12553-email-server-certificate-verification-disabled-this-issue-affects"},{"cve":"CVE-2025-12552","cvss":9.8,"epss":0.0034,"slug":"cve-2025-12552-insufficient-password-policy-this-issue-affects-blu-ic2-through-1","title":"Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-31T16:15:39.897+00:00","url":"https://junglewise.ai/threats/cve-2025-12552-insufficient-password-policy-this-issue-affects-blu-ic2-through-1"},{"cve":"CVE-2025-12517","cvss":5.3,"epss":0.0021,"slug":"cve-2025-12517-credits-page-not-matching-versions-in-use-in-the-firmwarethis","title":"Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"medium","exploited":false,"published_at":"2025-10-30T16:15:35.257+00:00","url":"https://junglewise.ai/threats/cve-2025-12517-credits-page-not-matching-versions-in-use-in-the-firmwarethis"},{"cve":"CVE-2025-12516","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12516-lack-of-graceful-error-handling-http-5xx-errorthis-issue-affects","title":"Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-30T16:15:35.11+00:00","url":"https://junglewise.ai/threats/cve-2025-12516-lack-of-graceful-error-handling-http-5xx-errorthis-issue-affects"},{"cve":"CVE-2025-12515","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12515-systemic-internal-server-errors-http-500-responsethis-issue","title":"Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-30T16:15:34.96+00:00","url":"https://junglewise.ai/threats/cve-2025-12515-systemic-internal-server-errors-http-500-responsethis-issue"},{"cve":"CVE-2025-12479","cvss":8.8,"epss":0.0017,"slug":"cve-2025-12479-systemic-lack-of-cross-site-request-forgery-csrf-token","title":"Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5…","severity":"high","exploited":false,"published_at":"2025-10-29T17:15:35.293+00:00","url":"https://junglewise.ai/threats/cve-2025-12479-systemic-lack-of-cross-site-request-forgery-csrf-token"},{"cve":"CVE-2025-12478","cvss":9.8,"epss":0.0024,"slug":"cve-2025-12478-non-compliant-tls-configuration-this-issue-affects-blu-ic2","title":"Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-29T17:15:34.993+00:00","url":"https://junglewise.ai/threats/cve-2025-12478-non-compliant-tls-configuration-this-issue-affects-blu-ic2"},{"cve":"CVE-2025-12477","cvss":9.8,"epss":0.0035,"slug":"cve-2025-12477-server-version-disclosure-this-issue-affects-blu-ic2-through-1-19","title":"Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-29T17:15:34.627+00:00","url":"https://junglewise.ai/threats/cve-2025-12477-server-version-disclosure-this-issue-affects-blu-ic2-through-1-19"},{"cve":"CVE-2025-12476","cvss":9.8,"epss":0.0034,"slug":"cve-2025-12476-resource-lacking-authn-this-issue-affects-blu-ic2-through-1-19-5","title":"Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-29T17:15:34.43+00:00","url":"https://junglewise.ai/threats/cve-2025-12476-resource-lacking-authn-this-issue-affects-blu-ic2-through-1-19-5"},{"cve":"CVE-2025-12425","cvss":7.8,"epss":0.0022,"slug":"cve-2025-12425-local-privilege-escalation-this-issue-affects-blu-ic2-through-1","title":"Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"high","exploited":false,"published_at":"2025-10-28T19:15:41.54+00:00","url":"https://junglewise.ai/threats/cve-2025-12425-local-privilege-escalation-this-issue-affects-blu-ic2-through-1"},{"cve":"CVE-2025-12424","cvss":9.8,"epss":0.0034,"slug":"cve-2025-12424-privilege-escalation-through-suid-bit-binary-this-issue-affects","title":"Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-28T19:15:41.403+00:00","url":"https://junglewise.ai/threats/cve-2025-12424-privilege-escalation-through-suid-bit-binary-this-issue-affects"},{"cve":"CVE-2025-12423","cvss":7.5,"epss":0.0034,"slug":"cve-2025-12423-protocol-manipulation-might-lead-to-denial-of-service-this-issue","title":"Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"high","exploited":false,"published_at":"2025-10-28T19:15:41.253+00:00","url":"https://junglewise.ai/threats/cve-2025-12423-protocol-manipulation-might-lead-to-denial-of-service-this-issue"},{"cve":"CVE-2025-12422","cvss":9.8,"epss":0.0049,"slug":"cve-2025-12422-vulnerable-upgrade-feature-arbitrary-file-write-may-lead-to","title":"Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue…","severity":"critical","exploited":false,"published_at":"2025-10-28T18:15:36.697+00:00","url":"https://junglewise.ai/threats/cve-2025-12422-vulnerable-upgrade-feature-arbitrary-file-write-may-lead-to"},{"cve":"CVE-2025-12365","cvss":5.3,"epss":0.0025,"slug":"cve-2025-12365-error-messages-wrapped-in-http-header-this-issue-affects-blu-ic2","title":"Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"medium","exploited":false,"published_at":"2025-10-27T19:16:02.793+00:00","url":"https://junglewise.ai/threats/cve-2025-12365-error-messages-wrapped-in-http-header-this-issue-affects-blu-ic2"},{"cve":"CVE-2025-12364","cvss":9.8,"epss":0.0034,"slug":"cve-2025-12364-weak-password-policy-this-issue-affects-blu-ic2-through-1-19-5","title":"Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-27T18:15:38.857+00:00","url":"https://junglewise.ai/threats/cve-2025-12364-weak-password-policy-this-issue-affects-blu-ic2-through-1-19-5"},{"cve":"CVE-2025-12363","cvss":7.5,"epss":0.0032,"slug":"cve-2025-12363-email-password-disclosure-this-issue-affects-blu-ic2-through-1-19","title":"Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"high","exploited":false,"published_at":"2025-10-27T18:15:38.223+00:00","url":"https://junglewise.ai/threats/cve-2025-12363-email-password-disclosure-this-issue-affects-blu-ic2-through-1-19"},{"cve":"CVE-2025-12285","cvss":9.8,"epss":0.0034,"slug":"cve-2025-12285-missing-initial-password-change-this-issue-affects-blu-ic2","title":"Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-26T17:15:52.533+00:00","url":"https://junglewise.ai/threats/cve-2025-12285-missing-initial-password-change-this-issue-affects-blu-ic2"},{"cve":"CVE-2025-12284","cvss":6.1,"epss":0.002,"slug":"cve-2025-12284-lack-of-input-validation-in-the-web-ui-might-lead-to-potential","title":"Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through…","severity":"medium","exploited":false,"published_at":"2025-10-26T17:15:52.357+00:00","url":"https://junglewise.ai/threats/cve-2025-12284-lack-of-input-validation-in-the-web-ui-might-lead-to-potential"},{"cve":"CVE-2025-12278","cvss":6.5,"epss":0.002,"slug":"cve-2025-12278-logout-functionality-not-working-this-issue-affects-blu-ic2","title":"Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"medium","exploited":false,"published_at":"2025-10-26T17:15:52.18+00:00","url":"https://junglewise.ai/threats/cve-2025-12278-logout-functionality-not-working-this-issue-affects-blu-ic2"}],"vendor":{"hub":true,"name":"Azure-Access","slug":"azure-access","url":"https://junglewise.ai/threats/vendors/azure-access"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-12275","cvss":9.8,"epss":0.0054,"slug":"cve-2025-12275-mail-configuration-file-manipulation-command-execution-this-issue","title":"Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-26T17:15:51.237+00:00","url":"https://junglewise.ai/threats/cve-2025-12275-mail-configuration-file-manipulation-command-execution-this-issue"},{"cve":"CVE-2025-12422","cvss":9.8,"epss":0.0049,"slug":"cve-2025-12422-vulnerable-upgrade-feature-arbitrary-file-write-may-lead-to","title":"Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue…","severity":"critical","exploited":false,"published_at":"2025-10-28T18:15:36.697+00:00","url":"https://junglewise.ai/threats/cve-2025-12422-vulnerable-upgrade-feature-arbitrary-file-write-may-lead-to"},{"cve":"CVE-2025-12599","cvss":9.8,"epss":0.0043,"slug":"cve-2025-12599-multiple-devices-are-sharing-the-same-secrets-for-sdksocket-tcp","title":"Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-11-01T19:15:38.41+00:00","url":"https://junglewise.ai/threats/cve-2025-12599-multiple-devices-are-sharing-the-same-secrets-for-sdksocket-tcp"},{"cve":"CVE-2025-12104","cvss":9.8,"epss":0.0041,"slug":"cve-2025-12104-outdated-and-vulnerable-ui-dependencies-might-potentially-lead-to","title":"Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through…","severity":"critical","exploited":false,"published_at":"2025-10-23T04:15:52+00:00","url":"https://junglewise.ai/threats/cve-2025-12104-outdated-and-vulnerable-ui-dependencies-might-potentially-lead-to"},{"cve":"CVE-2025-12600","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12600-web-ui-malfunction-when-setting-unexpected-locale-via-api-this","title":"Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-11-01T19:15:38.58+00:00","url":"https://junglewise.ai/threats/cve-2025-12600-web-ui-malfunction-when-setting-unexpected-locale-via-api-this"},{"cve":"CVE-2025-12554","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12554-missing-security-headers-this-issue-affects-blu-ic2-through-1-19","title":"Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-31T16:15:40.17+00:00","url":"https://junglewise.ai/threats/cve-2025-12554-missing-security-headers-this-issue-affects-blu-ic2-through-1-19"},{"cve":"CVE-2025-12516","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12516-lack-of-graceful-error-handling-http-5xx-errorthis-issue-affects","title":"Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-30T16:15:35.11+00:00","url":"https://junglewise.ai/threats/cve-2025-12516-lack-of-graceful-error-handling-http-5xx-errorthis-issue-affects"},{"cve":"CVE-2025-12515","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12515-systemic-internal-server-errors-http-500-responsethis-issue","title":"Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .","severity":"critical","exploited":false,"published_at":"2025-10-30T16:15:34.96+00:00","url":"https://junglewise.ai/threats/cve-2025-12515-systemic-internal-server-errors-http-500-responsethis-issue"},{"cve":"CVE-2025-12220","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12220-busybox-1-31-1-multiple-known-vulnerabilities-this-issue-affects","title":"Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-25T16:15:40.66+00:00","url":"https://junglewise.ai/threats/cve-2025-12220-busybox-1-31-1-multiple-known-vulnerabilities-this-issue-affects"},{"cve":"CVE-2025-12219","cvss":9.8,"epss":0.0037,"slug":"cve-2025-12219-vulnerable-components-in-azure-access-os-this-issue-affects-blu","title":"Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.","severity":"critical","exploited":false,"published_at":"2025-10-25T16:15:40.54+00:00","url":"https://junglewise.ai/threats/cve-2025-12219-vulnerable-components-in-azure-access-os-this-issue-affects-blu"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Azure-Access Blu-Ic2","slug":"blu-ic2","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/blu-ic2"},{"name":"Azure-Access Blu-Ic2 Firmware","slug":"blu-ic2-firmware","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/blu-ic2-firmware"},{"name":"Azure-Access Blu-Ic4","slug":"blu-ic4","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/blu-ic4"},{"name":"Azure-Access Blu-Ic4 Firmware","slug":"blu-ic4-firmware","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/blu-ic4-firmware"}]}