CNNVD-202510-3785 Information

CNNVD ID

CNNVD-202510-3785

CVE-2025-12424

  • CNNVD Published: 2025-10-28

Description (Chinese)

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4都是美国Azure Access Technology公司的一种网络门禁控制器。 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 1.19.5及之前版本存在安全漏洞,该漏洞源于SUID-bit二进制文件存在缺陷,可能导致权限提升。

Description (English)

Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are all web-based portal controllers for Azure Access Technology in the United States. There is a security gap in the version Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 1.19.5 and previous versions, which stems from deficiencies in the SUID-bit binary file, which may lead to increased privileges.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

Azure Access Technology

Published

2025-10-28

Last Modified

2026-02-24

References

https://azure-access.com/security-advisories https://access.redhat.com/security/cve/cve-2025-12424

Patch

https://azure-access.com/security-advisories/

Share on: