CVE-2025-12104CWE-1104

CVE-2025-12104

Critical · published October 23, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

🔥 Outdated UI dependencies in BLU-IC2 and BLU-IC4 could be a hacker's buffet! Those using versions up to 1.19.5 are especially vulnerable — it’s like leaving the bakery door wide open! Think of it as a restaurant with a menu printed on old paper — it might still serve great food, but if the chef is using expired ingredients, it won't end well! The outdated dependencies could let attackers serve up a dish of chaos instead of security. If an attacker exploits this vulnerability, they could gain unauthorized access to sensitive areas of your system, potentially compromising critical data and operations. The outcome could be absolutely devastating, leading to data breaches and operational disruptions that no one wants!

Put simply

Think of it as a restaurant with a menu printed on old paper — it might still serve great food, but if the chef is using expired ingredients, it won't end well! The outdated dependencies could let attackers serve up a dish of chaos instead of security. This vulnerability arises from outdated UI dependencies that have not been patched, which could allow attackers to execute malicious code or exploit weaknesses to gain unauthorized access.

What to do

If an attacker exploits this vulnerability, they could gain unauthorized access to sensitive areas of your system, potentially compromising critical data and operations. The outcome could be absolutely devastating, leading to data breaches and operational disruptions that no one wants! Immediately upgrade to the latest versions of BLU-IC2 and BLU-IC4 to mitigate this risk. Regularly audit your dependencies and ensure you're using the most recent and secure versions to prevent future vulnerabilities. Don't delay! You've got this! By taking these steps, you'll keep your systems secure and your users safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00408 · 33.9th percentile
Weakness
CWE-1104 · Use of Unmaintained Third Party Components
Published
2025-10-23T08:15Z
Affected products (2)
ProductVersionsFixed in
azure-access/blu-ic2_firmware< 1.201.20
azure-access/blu-ic4_firmware< 1.201.20
References (1)
EPSS history
Timeline
  • 23 OCT 03:56Z
    Incorrect Content-Type Header
    cvelistv5