PT-2025-42392 · Azure Access Technology · Blu-Ic2+1

Alexi Bitsios + 4 · Published 2025-10-15 · Updated 2025-10-16 · CVE-2025-11832

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Azure Access Technology BLU-IC2 versions through 1.19.5 Azure Access Technology BLU-IC4 versions through 1.19.5

Description A flaw exists in Azure Access Technology BLU-IC2 and BLU-IC4 related to the allocation of resources without limits or throttling, enabling flooding attacks. The issue stems from unthrottled API endpoints which permit resource exhaustion.

Recommendations Update Azure Access Technology BLU-IC2 to a version later than 1.19.5. Update Azure Access Technology BLU-IC4 to a version later than 1.19.5.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-11832

Affected Products

Blu-Ic2

Blu-Ic4

References · 7

• https://osv.dev/vulnerability/CVE-2025-11832 · Vendor Advisory
• https://azure-access.com/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11832 · Security Note
• https://twitter.com/offseq/status/1978612770158317600 · Twitter Post
• https://twitter.com/CVEnew/status/1978562033382572053 · Twitter Post
• https://twitter.com/0dayPublishing/status/1978542455742959816 · Twitter Post
• https://t.me/CVEtracker/35036 · Telegram Post