Azure Access BLU-IC2 and BLU-IC4 SDKSocket Secret Sharing Vulnerability

A vulnerability exists in the BLU-IC2 and BLU-IC4 devices, both through version 1.19.5, due to multiple devices sharing the same secrets for SDKSocket over TCP port 5000. This could potentially lead to unauthorized access or manipulation of data between devices.

Impact

Exploitation of this vulnerability could allow for unauthorized access to shared secrets between devices, potentially leading to further exploitation of the SDKSocket communication.

Remediation

Users are advised to update to the latest supported version of the firmware. Instructions for updating can be found on the Azure Access website.