Critical · published November 1, 2025
💡 A seemingly innocent vulnerability allows arbitrary writing to /etc/timezone in BLU-IC2 and BLU-IC4, but don't fret—it’s not as catastrophic as it sounds! Think of it like a restaurant's menu: if someone can sneak in and change the dishes, they might serve you something odd without you knowing. Not the end of the world, but definitely confusing! This could lead to incorrect timezone settings, resulting in misaligned schedules or logging times. While not catastrophic, it can create a disorienting experience for users, impacting operations subtly but surely.
Think of it like a restaurant's menu: if someone can sneak in and change the dishes, they might serve you something odd without you knowing. Not the end of the world, but definitely confusing! This vulnerability in BLU-IC2 and BLU-IC4 allows an attacker to write arbitrary data to the /etc/timezone file, which might affect system behaviors that depend on accurate timezone information.
This could lead to incorrect timezone settings, resulting in misaligned schedules or logging times. While not catastrophic, it can create a disorienting experience for users, impacting operations subtly but surely. Update BLU-IC2 and BLU-IC4 to version 1.19.6 or later to eliminate this vulnerability. Additionally, review file permissions and ensure only authorized users can modify sensitive system files. You've got this! A simple update can keep your system running smoothly. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| azure-access/blu-ic2_firmware | < 1.20 | 1.20 |
| azure-access/blu-ic4_firmware | < 1.20 | 1.20 |