CVE-2025-12515

CriticalCVSS 9.8

Published: 30/10/2025(UTC)Updated: 18/10/2026(UTC)Translated: 18/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

Summary

Systemic Internal Server Errors - HTTP 500 Response. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Risk Assessment

Systemic internal server errors may disclose infrastructure information or cause service unavailability, potentially facilitating further exploitation by an attacker.

Recommendation

Upgrade BLU-IC2 and BLU-IC4 to a version later than 1.19.5 that eliminates the systemic internal server errors.

Other vulnerabilities in BLU-IC2

See all

CVE-2025-12516Critical
Lack of Graceful Error Handling - HTTP 5xx Error. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12517Medium
Credits Page not Matching Versions in Use in the Firmware. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Original NVD description (English source)

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

Vulnerability data from NVD (NIST) · CISA KEV · EPSS