PT-2025-43752 · Blu-Ic2+1 · Blu-Ic2+1

Alexi Bitsios + 4 · Published 2025-10-26 · Updated 2025-11-07 · CVE-2025-12275

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5

Description The software contains a flaw related to mail configuration file manipulation that can lead to command execution. The issue affects the handling of configuration files, potentially allowing an attacker to inject malicious commands. The vulnerable component is the mail configuration process. No information is available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited.

Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC4 to a version later than 1.19.5.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-12275

Affected Products

Blu-Ic2

Blu-Ic4

References · 9

• https://osv.dev/vulnerability/CVE-2025-12275 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12275 · Security Note
• https://azure-access.com/security-advisories · Vendor Advisory
• https://t.me/cveNotify/140357 · Telegram Post
• https://twitter.com/offseq/status/1982620897094611409 · Twitter Post
• https://t.me/cveNotify/142048 · Telegram Post
• https://twitter.com/CVEnew/status/1982486965103759520 · Twitter Post
• https://t.me/CVEtracker/35759 · Telegram Post
• https://twitter.com/CveFindCom/status/1982487276052521122 · Twitter Post