blu
Security Risk Profile
79
/100
highSecurity Risk Score
Comprehensive risk assessment based on 36 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 22, 2024 to present
36
Total CVEs
29
Critical+High
0
Exploited
29
Unpatched
Threat Assessment
Avg CVSS
9.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
29
Critical/High
Risk Level
79/100
high
Severity Distribution
Critical
29High
0Medium
7Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Input Validation
5
2
XSS
2
3
CSRF
1
4
Weak Encryption
1
5
Path Traversal
1
Most Affected Products
1. Azure-access Blu-ic2 Firmware35
2. Azure-access Blu-ic4 Firmware35
3. BLU IC220
4. BLU IC420
5. BLU BLU-IC215
Recent Vulnerabilities
See more →CVE-2025-12603
CVSS 9.8critical
/etc/timezone can be Arbitrarily Written
11/1/2025🔧 No Patch
CVE-2025-12602
CVSS 9.8critical
/etc/avahi/services/z9.service can be Arbitrarily Written
11/1/2025🔧 No Patch
CVE-2025-12601
CVSS 10.0critical
Denial of Service Due to SlowLoris
11/1/2025🔧 No Patch
CVE-2025-12600
CVSS 10.0critical
Web UI Malfunction
11/1/2025🔧 No Patch
CVE-2025-12599
CVSS 10.0critical
Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)
11/1/2025🔧 No Patch
CVE-2025-12554
CVSS 9.8critical
Missing Security Headers
10/31/2025🔧 No Patch
CVE-2025-12553
CVSS 10.0critical
Server Certificate Verification Disabled
10/31/2025🔧 No Patch
CVE-2025-12552
CVSS 9.8critical
Insufficient Password Policy
10/31/2025🔧 No Patch
CVE-2025-12517
CVSS 5.3medium
Credits Page not Matching Versions in Use in the Firmware
10/30/2025🔧 No Patch
CVE-2025-12516
CVSS 10.0critical
Lack of Graceful Error Handling - HTTP 5xx Error
10/30/2025🔧 No Patch
Monitor blu in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.