What is the azure-access CNA?

azure-access is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 39 CVE records since 2025.

How many CVEs has azure-access published?

azure-access has published 39 CVE records, including 39 in the last two years.

What is azure-access's CVE data quality grade?

RadicalNotion.AI grades azure-access's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.

What products does azure-access publish CVEs for?

azure-access most frequently publishes CVEs for BLU-IC2, blu-ic2 firmware, BLU-IC4, blu-ic4 firmware.

Which vendors does azure-access cover?

azure-access publishes CVEs across 1 distinct vendors, most often azure-access, Azure Access Technology.

Is azure-access actively publishing CVEs?

azure-access is currently active, based on 39 CVEs in the last two years.

What is the average severity of azure-access's CVEs?

The average CVSS base score across azure-access's scored CVEs is 8.5.

How many critical CVEs has azure-access published?

azure-access has published 27 critical-severity CVEs and 0 high-severity CVEs.

What are the most common weakness types in azure-access's CVEs?

azure-access's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-1395 (Dependency on Vulnerable Third-Party Component), CWE-730, CWE-269 (Improper Privilege Management).

How does azure-access rank among CNAs?

By total CVE volume, azure-access ranks #193 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

Grade A

Active

azure-access

Name: azure-access CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published November 1, 2025

CVEs published

Total assigned

Years active

2025–2025

8.5

Avg CVSS

Across scored CVEs

Recent CVEs

Last 2 years

Overview

azure-access is a CVE Numbering Authority that has published 39 CVE records since 2025. It is currently classified as active, with 39 CVEs published in the last two years. Its CVE data quality is graded A (100% overall completeness).

Among the 370 CNAs tracked here, azure-access ranks #193 by CVE volume and reports more complete records than 60% of all CNAs.

Data quality report card

How complete and consistent azure-access's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often azure-access also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

100%

Overall score

Overall completeness100%

Vendor completeness100%

Product completeness100%

CVSS completeness100%

CWE completeness100%

97.4%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

127 chars

Avg description length

Per CVE record

2025-10-15

First CVE date

Earliest assignment

2025-11-01

Latest CVE date

Most recent assignment

8.5

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of azure-access's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical27

High0

Medium8

Low4

In CISA’s Known Exploited Vulnerabilities catalog

None of azure-access's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories azure-access most often assigns to its CVEs. Follow any weakness to its full explanation.

Top vendors

The vendors azure-access publishes the most CVEs for.

azure-access39 CVEs
Azure Access Technology39 CVEs

Latest CVEs

The most recent CVEs assigned by azure-access.

CVE-2025-12603CWE-787
/etc/timezone can be Arbitrarily Written
Low · CVSS 2.3
EPSS 0.3%2025-11-01
CVE-2025-12602CWE-787
/etc/avahi/services/z9.service can be Arbitrarily Written
Low · CVSS 2.3
EPSS 0.3%2025-11-01
CVE-2025-12601CWE-730
Denial of Service Due to SlowLoris
Critical · CVSS 10.0
EPSS 0.3%2025-11-01
CVE-2025-12600CWE-730
Web UI Malfunction
Critical · CVSS 10.0
EPSS 0.3%2025-11-01
CVE-2025-12599CWE-321
Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)
Critical · CVSS 10.0
EPSS 0.4%2025-11-01
CVE-2025-12554CWE-693
Missing Security Headers
Medium · CVSS 6.9
EPSS 0.3%2025-10-31
CVE-2025-12553CWE-599
Server Certificate Verification Disabled
Critical · CVSS 10.0
EPSS 0.2%2025-10-31
CVE-2025-12552CWE-521
Insufficient Password Policy
Medium · CVSS 6.9
EPSS 0.3%2025-10-31
CVE-2025-12517CWE-448
Credits Page not Matching Versions in Use in the Firmware
Low · CVSS 2.1
EPSS 0.2%2025-10-30
CVE-2025-12516CWE-394
Lack of Graceful Error Handling - HTTP 5xx Error
Critical · CVSS 10.0
EPSS 0.3%2025-10-30
CVE-2025-12515CWE-394
Systemic Internal Server Errors - HTTP 500 Response
Critical · CVSS 10.0
EPSS 0.3%2025-10-30
CVE-2025-12479CWE-352
Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation
Critical · CVSS 10.0
EPSS 0.2%2025-10-29

Track new azure-access CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor azure-access CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the azure-access CNA.

What is the azure-access CNA?: azure-access is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 39 CVE records since 2025.
How many CVEs has azure-access published?: azure-access has published 39 CVE records, including 39 in the last two years.
What is azure-access's CVE data quality grade?: RadicalNotion.AI grades azure-access's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.
What products does azure-access publish CVEs for?: azure-access most frequently publishes CVEs for BLU-IC2, blu-ic2 firmware, BLU-IC4, blu-ic4 firmware.
Which vendors does azure-access cover?: azure-access publishes CVEs across 1 distinct vendors, most often azure-access, Azure Access Technology.
Is azure-access actively publishing CVEs?: azure-access is currently active, based on 39 CVEs in the last two years.
What is the average severity of azure-access's CVEs?: The average CVSS base score across azure-access's scored CVEs is 8.5.
How many critical CVEs has azure-access published?: azure-access has published 27 critical-severity CVEs and 0 high-severity CVEs.
Are any of azure-access's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of azure-access's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in azure-access's CVEs?: azure-access's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-1395 (Dependency on Vulnerable Third-Party Component), CWE-730, CWE-269 (Improper Privilege Management).
How does azure-access rank among CNAs?: By total CVE volume, azure-access ranks #193 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track azure-access CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing