CVE-2025-12423CWE-248

CVE-2025-12423

High · published October 28, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

🚨 A sneaky protocol manipulation could bring your BLU-IC2 and BLU-IC4 systems to a standstill! 🔥 Think of it like a jamming device at a concert that disrupts the sound system, leaving everyone unable to hear the music. This vulnerability allows attackers to interfere with the protocol, effectively silencing your systems. If exploited, this could lead to a complete denial of service, causing those systems to become unresponsive and leaving users in the lurch. Imagine your critical operations grinding to a halt, and users unable to access services they rely on – that’s a recipe for chaos!

Put simply

Think of it like a jamming device at a concert that disrupts the sound system, leaving everyone unable to hear the music. This vulnerability allows attackers to interfere with the protocol, effectively silencing your systems. This vulnerability stems from improper handling of protocol operations, which allows attackers to manipulate requests in a way that disrupts system functionality, ultimately leading to service outages.

What to do

If exploited, this could lead to a complete denial of service, causing those systems to become unresponsive and leaving users in the lurch. Imagine your critical operations grinding to a halt, and users unable to access services they rely on – that’s a recipe for chaos! To protect your systems, urgently patch your BLU-IC2 and BLU-IC4 to version 1.19.6 or later. Review your network configurations to ensure that proper limits are in place to mitigate potential disruptions. You've got this! Implement these steps, and you'll be back on track in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.6th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2025-10-28T23:15Z
Affected products (2)
ProductVersionsFixed in
azure-access/blu-ic2_firmware< 1.201.20
azure-access/blu-ic4_firmware< 1.201.20
References (1)
EPSS history
Timeline
  • 28 OCT 18:14Z
    Denial of Service - Protocol Manipulation
    cvelistv5