CVE-2025-12217 SNMP Default Community String (public)
Attackers can access network devices using the default SNMP community string, potentially exposing sensitive data or bypassing security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-12217?
CVE-2025-12217 is a medium-severity vulnerability in Azure Access Technology BLU-IC2, published on 25 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Weakness: CWE-1392
Which versions are affected by CVE-2025-12217?
It affects 2 products.
Products include Azure-Access Blu-Ic2 Firmware, Azure-Access Blu-Ic4 Firmware.
How do I fix CVE-2025-12217?
No fix has been published for CVE-2025-12217 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-12217 being exploited?
There is no known exploitation of CVE-2025-12217 in the wild and no public exploit code.
Other vulnerabilities in Azure Access Technology BLU-IC2
Sources
Also known as GHSA-7hmv-fvpj-wq57.