Systemic Internal Server Errors in BLU-IC2 and BLU-IC4 by Azure Access
CVE-2025-12515

10CRITICAL

Key Information:

Vendor: Azure Access Technology
Status: Blu-ic2; Blu-ic4
Vendor: CVE Published:; 30 October 2025

🔔 Create Azure Access Technology Vulnerability Alert

What is CVE-2025-12515?

A systemic internal server error issue has been identified in Azure Access's products, specifically affecting BLU-IC2 and BLU-IC4 versions up to 1.19.5. This can result in HTTP 500 responses, indicating failed requests that may disrupt services and degrade user experience. It's crucial for administrators to assess their systems and implement necessary updates or fixes to mitigate potential disruptions.

Affected Version(s)

BLU-IC2 0 <= 1.19.5

BLU-IC4 0 <= 1.19.5

References

https://azure-access.com/security-advisories

CVSS V4

Score:

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 30, 2025
Vulnerability Reserved
Oct 30, 2025

Credit

Kevin Schaller

Benjamin Lafois

Alexi Bitsios

Sebastian Toscano

Dominik Schneider

JSON