Systemic Internal Server Errors - HTTP 500 Response
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 0.3%
exploitation probability
0.3%top 73% of all CVEs
observed exploitation
nono source reports it
In short
A critical flaw causes the BLU-IC2 and BLU-IC4 systems (versions up to 1.19.5) to repeatedly crash with internal server errors (HTTP 500), making them completely unavailable. This prevents legitimate users from accessing the service at all.
Technical detail
A systemic exception handling failure in BLU-IC2 and BLU-IC4 up to 1.19.5 triggers persistent HTTP 500 errors on routine requests, resulting in denial of service. The vulnerability stems from improper error handling (CWE-394) that crashes the application without graceful recovery, affecting availability with no authentication requirement.
Summary generated and translated by AI from the official description.
Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H