CVE-2025-12599

Summary

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Affected Software

VendorProductVersion RangeStatus
Azure Access TechnologyBLU-IC20 <= 1.19.5affected
Azure Access TechnologyBLU-IC40 <= 1.19.5affected

Weaknesses

  • CWE-321: CWE-321 Use of Hard-coded Cryptographic Key

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References