CVE-2025-12216
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A malicious or malformed app can be installed but not uninstalled, potentially leading to unavailability. This issue affects BLU-IC2 and BLU-IC4 through version 1.19.5.
Risk Assessment
This could cause persistent unavailability of the service or device, requiring administrative intervention. The risk applies to environments with vulnerable versions installed.
Recommendation
Update BLU-IC2 and BLU-IC4 software to a version later than 1.19.5. Avoid installing apps from unverified sources.
Other vulnerabilities in BLU-IC2
See all- CVE-2025-12516Critical
Lack of Graceful Error Handling - HTTP 5xx Error. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
- CVE-2025-12515Critical
Systemic Internal Server Errors - HTTP 500 Response. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
- CVE-2025-12517Medium
Credits Page not Matching Versions in Use in the Firmware. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Original NVD description (English source)
Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS