Critical · published October 25, 2025
🚨 Weak default credentials are lurking in BLU-IC2 and BLU-IC4 up to version 1.19.5! It's like leaving your front door wide open with a sign that says 'Welcome!' 🔥 Think of it like a restaurant that keeps the back door unlocked while the chef is busy; anyone can just walk in and access everything without a second glance! This vulnerability lets attackers in as easily as a hungry diner swiping a chef’s special. If exploited, an attacker could gain complete control over your devices, accessing sensitive data or even shutting down services. This critical vulnerability puts your entire network at risk, potentially leading to devastating breaches and loss of trust.
Think of it like a restaurant that keeps the back door unlocked while the chef is busy; anyone can just walk in and access everything without a second glance! This vulnerability lets attackers in as easily as a hungry diner swiping a chef’s special. This vulnerability stems from the presence of weak default credentials in BLU-IC2 and BLU-IC4, allowing unauthorized users to gain access without proper authentication, effectively bypassing security measures.
If exploited, an attacker could gain complete control over your devices, accessing sensitive data or even shutting down services. This critical vulnerability puts your entire network at risk, potentially leading to devastating breaches and loss of trust. To secure your systems, immediately change the default credentials to strong, unique passwords. Ensure all installations are upgraded to versions beyond 1.19.5 to patch this vulnerability effectively. You've got this! By taking these steps, you're on your way to locking down your systems tight. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| azure-access/blu-ic2_firmware | < 1.20 | 1.20 |
| azure-access/blu-ic4_firmware | < 1.20 | 1.20 |