Critical · 10.0 CVE-2025-12422 EUVD-2025-36550GHSA-r668-gv5f-w9pf

Vulnerable Upgrade Feature (Arbitrary File Write)

Published Oct 28, 2025 · Updated Oct 28, 2025 · Assigned by azure-access

Vendor: Azure Access Technology Product: BLU-IC2 Product: BLU-IC4

Description

Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Affected products

Vendor	Product	Affected	Fixed
Azure Access Technology	BLU-IC2	≤ 1.19.5	—
Azure Access Technology	BLU-IC4	≤ 1.19.5	—

References

https://azure-access.com/security-advisories