CVE-2025-12516
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Lack of Graceful Error Handling - HTTP 5xx Error. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Risk Assessment
Improper error handling may lead to information disclosure or application instability, which could be leveraged by an attacker for further actions.
Recommendation
Upgrade BLU-IC2 and BLU-IC4 to a version later than 1.19.5 that includes improved error handling.
Other vulnerabilities in BLU-IC2
See all- CVE-2025-12515Critical
Systemic Internal Server Errors - HTTP 500 Response. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
- CVE-2025-12517Medium
Credits Page not Matching Versions in Use in the Firmware. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
- CVE-2025-12216Medium
A malicious or malformed app can be installed but not uninstalled, potentially leading to unavailability. This issue affects BLU-IC2 and BLU-IC4 through version 1.19.5.
Original NVD description (English source)
Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Vulnerability data from NVD (NIST) · CISA KEV · EPSS