CVE-2025-12217 - Vulnerability Details - OpenCVE

SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact Low

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://azure-access.com/security-advisories

History

Sat, 25 Oct 2025 15:45:00 +0000

Type	Values Removed	Values Added
Description		SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Title		SNMP Default Community String (public)
Weaknesses		CWE-1392
References		https://azure-access.com/security-advisories
Metrics		cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L'}`

MITRE

Status: PUBLISHED

Assigner: azure-access

Published: 2025-10-25T15:39:52.671Z

Updated: 2025-10-25T15:39:52.671Z

Reserved: 2025-10-25T15:38:45.499Z

Link: CVE-2025-12217

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-10-25T16:15:40.243

Modified: 2025-10-25T16:15:40.243

Link: CVE-2025-12217

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-12217", "assignerOrgId": "a0340c66-c385-4f8b-991b-3d05f6fd5220", "state": "PUBLISHED", "assignerShortName": "azure-access", "dateReserved": "2025-10-25T15:38:45.499Z", "datePublished": "2025-10-25T15:39:52.671Z", "dateUpdated": "2025-10-25T15:39:52.671Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "BLU-IC2", "vendor": "Azure Access Technology", "versions": [{"lessThanOrEqual": "1.19.5", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "BLU-IC4", "vendor": "Azure Access Technology", "versions": [{"lessThanOrEqual": "1.19.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Kevin Schaller"}, {"lang": "en", "type": "finder", "value": "Benjamin Lafois"}, {"lang": "en", "type": "finder", "value": "Alexi Bitsios"}, {"lang": "en", "type": "finder", "value": "Sebastian Toscano"}, {"lang": "en", "type": "finder", "value": "Dominik Schneider"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "SNMP Default Community String (public).<p>This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.</p>"}], "value": "SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5."}], "impacts": [{"capecId": "CAPEC-114", "descriptions": [{"lang": "en", "value": "CAPEC-114 Authentication Abuse"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 6.9, "baseSeverity": "MEDIUM", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1392", "description": "CWE-1392: Use of Default Credentials", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a0340c66-c385-4f8b-991b-3d05f6fd5220", "shortName": "azure-access", "dateUpdated": "2025-10-25T15:39:52.671Z"}, "references": [{"url": "https://azure-access.com/security-advisories"}], "source": {"discovery": "UNKNOWN"}, "title": "SNMP Default Community String (public)", "x_generator": {"engine": "Vulnogram 0.2.0"}}}}