CVE-2025-12553
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Email Server Certificate Verification Disabled. This issue affects BLU-IC2 through 1.19.5 and BLU-IC4 through 1.19.5.
Risk Assessment
An attacker could intercept or modify email communication, potentially leading to data leakage or phishing.
Recommendation
Update the device firmware to a version that fixes the issue, or enable email server certificate verification.
Other vulnerabilities in BLU-IC2/IC4
See all- CVE-2025-12478Critical
Non-Compliant TLS Configuration. This issue affects BLU-IC2 through 1.19.5 and BLU-IC4 through 1.19.5.
- CVE-2025-12217Critical
BLU-IC2 and BLU-IC4 devices through version 1.19.5 use the default SNMP community string 'public'. This allows unauthorized access to management information via SNMP.
Original NVD description (English source)
Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS