CVE-2025-12031

CVE-2025-12031

  • Severity: LOW
  • CVE: CVE-2025-12031
  • Affected Hardware: BLU-IC2, BLU-IC4
  • Firmware Version: 1.19.5
  • Mitigations: NO
  • Reported by: Kevin Schaller, Benjamin Lafois, Alexi Bitsios, Sebastian Toscano, Dominik Schneider
  • Active exploitation of vulnerability: NO
  • Description:HTTP Security Misconfiguration – Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript context
  • Which versions patch releases are available for: 1.20