Azure Access BLU-IC2 and BLU-IC4 Missing Initial Password Change Vulnerability

A vulnerability exists in Azure Access BLU-IC2 and BLU-IC4 products, all versions through 1.19.5, due to a missing initial password change requirement. This oversight can lead to unauthorized access or use of the device, as users may not be prompted to change default passwords, potentially allowing for exploitation or misuse.

Impact

The lack of an initial password change requirement can result in unauthorized access to the device, as users may retain default passwords that can be easily exploited.