CVE-2025-12517
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Credits Page not Matching Versions in Use in the Firmware. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Risk Assessment
A discrepancy between the Credits page and actual firmware versions can hinder vulnerability management and lead to incorrect assessment of device security posture.
Recommendation
Verify actual firmware versions on BLU-IC2 and BLU-IC4 devices independently of the Credits page information. Contact the vendor for a fix.
Other vulnerabilities in BLU-IC2
See all- CVE-2025-12516Critical
Lack of Graceful Error Handling - HTTP 5xx Error. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
- CVE-2025-12515Critical
Systemic Internal Server Errors - HTTP 500 Response. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
- CVE-2025-12216Medium
A malicious or malformed app can be installed but not uninstalled, potentially leading to unavailability. This issue affects BLU-IC2 and BLU-IC4 through version 1.19.5.
Original NVD description (English source)
Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Vulnerability data from NVD (NIST) · CISA KEV · EPSS