BaseFortify

Publication date: 2025-11-01

Last updated on: 2025-11-07

Assigner: azure-access

Description

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-01

Last Modified

2025-11-07

Generated

2026-07-06

AI Q&A

2025-11-01

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12603

Affected Vendors & Products

Vendor	Product	Version / Range
azure-access	blu-ic2_firmware	to 1.20 (exc)
azure-access	blu-ic2	*
azure-access	blu-ic4_firmware	to 1.20 (exc)
azure-access	blu-ic4	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability allows arbitrary writing to the /etc/timezone file in affected BLU-IC2 and BLU-IC4 versions up to 1.19.5. This means an attacker with certain privileges can modify the system timezone configuration file.

Impact Analysis

An attacker able to arbitrarily write to /etc/timezone could potentially disrupt system time settings, which may affect time-dependent applications, logging accuracy, and system behavior. However, the overall impact is considered low severity based on the CVSS score.

Hi! I’m here to help you understand CVE-2025-12603. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70