CVE-2025-11832CWE-770denial-of-service

CVE-2025-11832

Critical · published October 15, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

🚨 A flooding vulnerability lurks in Azure Access Technology, ready to turn your resources into a wild water park! 🔥 Think of it like a restaurant that keeps serving food without checking how many customers are at the table — soon, there’s a chaotic overflow and no one gets served! An attacker could potentially flood your Azure resources, leading to service outages and making it impossible to maintain performance. This could disrupt operations and leave your applications gasping for breath!

Put simply

Think of it like a restaurant that keeps serving food without checking how many customers are at the table — soon, there’s a chaotic overflow and no one gets served! This vulnerability allows for the allocation of resources without limits or throttling, giving attackers the freedom to overwhelm Azure Access Technology BLU-IC2 and BLU-IC4, versions through 1.19.5.

What to do

An attacker could potentially flood your Azure resources, leading to service outages and making it impossible to maintain performance. This could disrupt operations and leave your applications gasping for breath! To defend against this, upgrade immediately to the latest version of BLU-IC2 or BLU-IC4. Implement resource throttling and monitoring to prevent flooding attacks from taking over your system. 🛡️ You've got this! Address this vulnerability ASAP, and you'll be back in control in no time! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.7th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-10-15T23:15Z
Affected products (2)
ProductVersionsFixed in
azure-access/blu-ic2_firmware< 1.201.20
azure-access/blu-ic4_firmware< 1.201.20
References (1)
EPSS history
Timeline
  • 15 OCT 19:10Z
    APIs Lack Rate Limiting
    cvelistv5