# cve.now: Azure Access Technology

The newest entries naming Azure Access Technology as an affected vendor (up to 200), of 39 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-12603](https://cve.now/CVE-2025-12603.md): /etc/timezone can be Arbitrarily Written (CVSS 2.3)
- [CVE-2025-12602](https://cve.now/CVE-2025-12602.md): /etc/avahi/services/z9.service can be Arbitrarily Written (CVSS 2.3)
- [CVE-2025-12601](https://cve.now/CVE-2025-12601.md): Denial of Service Due to SlowLoris (CVSS 10.0)
- [CVE-2025-12600](https://cve.now/CVE-2025-12600.md): Web UI Malfunction (CVSS 10.0)
- [CVE-2025-12599](https://cve.now/CVE-2025-12599.md): Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000) (CVSS 10.0)
- [CVE-2025-12554](https://cve.now/CVE-2025-12554.md): Missing Security Headers (CVSS 6.9)
- [CVE-2025-12553](https://cve.now/CVE-2025-12553.md): Server Certificate Verification Disabled (CVSS 10.0)
- [CVE-2025-12552](https://cve.now/CVE-2025-12552.md): Insufficient Password Policy (CVSS 6.9)
- [CVE-2025-12517](https://cve.now/CVE-2025-12517.md): Credits Page not Matching Versions in Use in the Firmware (CVSS 2.1)
- [CVE-2025-12516](https://cve.now/CVE-2025-12516.md): Lack of Graceful Error Handling - HTTP 5xx Error (CVSS 10.0)
- [CVE-2025-12515](https://cve.now/CVE-2025-12515.md): Systemic Internal Server Errors - HTTP 500 Response (CVSS 10.0)
- [CVE-2025-12479](https://cve.now/CVE-2025-12479.md): Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation (CVSS 10.0)
- [CVE-2025-12478](https://cve.now/CVE-2025-12478.md): Non-Compliant TLS Configuration (CVSS 10.0)
- [CVE-2025-12477](https://cve.now/CVE-2025-12477.md): Server Version Disclosure (CVSS 10.0)
- [CVE-2025-12476](https://cve.now/CVE-2025-12476.md): Resource Lacking AuthN (CVSS 10.0)
- [CVE-2025-12425](https://cve.now/CVE-2025-12425.md): Local Privilege Escalation (CVSS 10.0)
- [CVE-2025-12424](https://cve.now/CVE-2025-12424.md): Privilege Escalation through SUID-bit Binary (CVSS 10.0)
- [CVE-2025-12423](https://cve.now/CVE-2025-12423.md): Denial of Service - Protocol Manipulation (CVSS 10.0)
- [CVE-2025-12422](https://cve.now/CVE-2025-12422.md): Vulnerable Upgrade Feature (Arbitrary File Write) (CVSS 10.0)
- [CVE-2025-12365](https://cve.now/CVE-2025-12365.md): Error Messages Wrapped In HTTP Header (CVSS 6.9)
- [CVE-2025-12364](https://cve.now/CVE-2025-12364.md): Weak Password Policy (CVSS 10.0)
- [CVE-2025-12363](https://cve.now/CVE-2025-12363.md): Email Password Disclosure (CVSS 10.0)
- [CVE-2025-12285](https://cve.now/CVE-2025-12285.md): Missing Initial Password Change (CVSS 10.0)
- [CVE-2025-12284](https://cve.now/CVE-2025-12284.md): Lack of Input Validation (CVSS 6.9)
- [CVE-2025-12275](https://cve.now/CVE-2025-12275.md): Mail Configuration File Manipulation + Command Execution (CVSS 10.0)
- [CVE-2025-12278](https://cve.now/CVE-2025-12278.md): Logout Functionality not Working (CVSS 6.9)
- [CVE-2025-12221](https://cve.now/CVE-2025-12221.md): CSRF Token not Properly Implemented (CVSS 2.1)
- [CVE-2025-12220](https://cve.now/CVE-2025-12220.md): Busybox 1.31.1 - Multiple Known Vulnerabilities (CVSS 10.0)
- [CVE-2025-12219](https://cve.now/CVE-2025-12219.md): Vulnerable Components in Azure Access OS (CVSS 10.0)
- [CVE-2025-12218](https://cve.now/CVE-2025-12218.md): Weak Default Credentials (CVSS 10.0)
- [CVE-2025-12217](https://cve.now/CVE-2025-12217.md): SNMP Default Community String (public) (CVSS 6.9)
- [CVE-2025-12216](https://cve.now/CVE-2025-12216.md): Malicious / Malformed App can be Installed but not Uninstalled (CVSS 10.0)
- [CVE-2025-12176](https://cve.now/CVE-2025-12176.md): Undocumented Administrative Accounts (CVSS 10.0)
- [CVE-2025-12114](https://cve.now/CVE-2025-12114.md): Serial Console Enabled (CVSS 5.2)
- [CVE-2025-12104](https://cve.now/CVE-2025-12104.md): Incorrect Content-Type Header (CVSS 10.0)
- [CVE-2025-12031](https://cve.now/CVE-2025-12031.md): HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute (CVSS 5.3)
- [CVE-2025-12001](https://cve.now/CVE-2025-12001.md): Incorrect Content-Type Header (CVSS 10.0)
- [CVE-2025-11925](https://cve.now/CVE-2025-11925.md): Incorrect Content-Type Header (CVSS 10.0)
- [CVE-2025-11832](https://cve.now/CVE-2025-11832.md): APIs Lack Rate Limiting (CVSS 10.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/azure-access-technology
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.