Azure Access maintains a specialized product line focused on intelligent credential and access-management appliances, with vulnerabilities clustering across its BLU IC2 and IC4 hardware platforms and their associated firmware components. The vendor's vulnerability profile is narrow in scope, reflecting the focused nature of its appliance-based offering and the security-critical role these devices play in identity and access workflows. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Azure Access over time
Signals from CVEs in this vendor scope (39 CVEs).
39 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-12477CRITICAL Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | Oct 29, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-12424CRITICAL Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | Oct 28, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-12275CRITICAL Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Oct 26, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-12599CRITICAL Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Nov 1, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-12422CRITICAL Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Oct 28, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-12285CRITICAL Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Oct 26, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-12220CRITICAL Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Oct 25, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-12219CRITICAL Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Oct 25, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-12176CRITICAL Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 | Oct 24, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-12104CRITICAL Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Oct 23, 2025 | 9.8 | 32 | NO | NO |
Signals from CVEs in this vendor scope (39 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Azure Access.
Media articles that mention a CVE ID that affects a product developed by Azure Access — matched by CVE ID, not by vendor name.