PT-2025-44726 · Blu-Ic2+1 · Blu-Ic2+1

Alexi Bitsios + 4 · Published 2025-11-01 · Updated 2025-11-01 · CVE-2025-12599

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5

Description Multiple devices are sharing the same secrets for SDKSocket, which uses TCP port 5000. This could allow unauthorized access or compromise of devices utilizing this communication channel.

Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC4 to a version later than 1.19.5.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2025-12599

Affected Products

Blu-Ic2

Blu-Ic4

References · 5

• https://osv.dev/vulnerability/CVE-2025-12599 · Vendor Advisory
• https://azure-access.com/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12599 · Security Note
• https://t.me/cveNotify/141254 · Telegram Post
• https://t.me/CVEtracker/36379 · Telegram Post