CVE-2025-12285

Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Score

CVSS 4.0 10.0 Critical

Status

Analyzed - a0340c66-c385-4f8b-991b-3d05f6fd5220

Published

2025-10-26

Last modified

2026-10-18

Weaknesses

CWE-20, CWE-521

Affected products

• Blu-ic2 Firmware (Azure-access)
• Blu-ic4 Firmware (Azure-access)
• Blu-ic2 (Azure Access Technology)
• Blu-ic4 (Azure Access Technology)

References

• https://azure-access.com/security-advisories