PT-2025-44316 · Blu-Ic2+1 · Blu-Ic2+1

Alexi Bitsios + 4 · Published 2025-10-29 · Updated 2025-11-07 · CVE-2025-12477

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5

Description The software reveals its version information. This could potentially allow attackers to gather information about the system to target it with specific exploits.

Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC4 to a version later than 1.19.5.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-12477

Affected Products

Blu-Ic2

Blu-Ic4

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-12477 · Security Note
• https://azure-access.com/security-advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-12477 · Vendor Advisory
• https://twitter.com/CVEnew/status/1983577232510521518 · Twitter Post
• https://t.me/cveNotify/142108 · Telegram Post
• https://t.me/CVEtracker/36079 · Telegram Post
• https://twitter.com/offseq/status/1983753372143419438 · Twitter Post