SecuriTricks - CVE-2025-12114

Description

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Product(s) Impacted

Vendor	Product	Versions
Blu	Blu-ic2 Blu-ic4	<1.19.5 <1.19.5

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-1191

On-Chip Debug and Test Interface With Improper Access Control

The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	blu	blu-ic2	<1.19.5	/	/	/	/	/	/	/
a	blu	blu-ic4	<1.19.5	/	/	/	/	/	/	/

References

https://azure-access.com/security-advisories

CVSS Score

5.2 / 10

CVSS Data - 4.0

Attack Vector: LOCAL
Attack Complexity: HIGH
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: PASSIVE
Scope:
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: LOW
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: Oct. 23, 2025, 4:15 p.m.
Last Modified: Oct. 23, 2025, 4:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

a0340c66-c385-4f8b-991b-3d05f6fd5220

CVE-2025-12114