CVE-2025-12216CWE-1301

CVE-2025-12216

Medium · published October 25, 2025

CVSS v3.1

5.5

EPSS

Percentile

11.5

In the wild

Unconfirmed

What it is

Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00217 · 11.5th percentile
Weakness: CWE-1301 · Insufficient or Incomplete Data Removal within Hardware Component
Published: 2025-10-25T20:15Z

Affected products (2)

Product	Versions	Fixed in
azure-access/blu-ic2_firmware	< 1.20	1.20
azure-access/blu-ic4_firmware	< 1.20	1.20

References (1)

https://azure-access.com/security-advisories · a0340c66-c385-4f8b-991b-3d05f6fd5220

EPSS history

Timeline

25 OCT 15:33Z
Malicious / Malformed App can be Installed but not Uninstalled
cvelistv5