CVE-2025-12517

MediumCVSS 5.3

Published: 30/10/2025(UTC)Updated: 18/10/2026(UTC)Translated: 18/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Summary

Credits Page not Matching Versions in Use in the Firmware. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Risk Assessment

A discrepancy between the Credits page and actual firmware versions can hinder vulnerability management and lead to incorrect assessment of device security posture.

Recommendation

Verify actual firmware versions on BLU-IC2 and BLU-IC4 devices independently of the Credits page information. Contact the vendor for a fix.

Other vulnerabilities in BLU-IC2

See all

CVE-2025-12516Critical
Lack of Graceful Error Handling - HTTP 5xx Error. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12515Critical
Systemic Internal Server Errors - HTTP 500 Response. This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Original NVD description (English source)

Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

Vulnerability data from NVD (NIST) · CISA KEV · EPSS