bizerba

Latest CVEs · RSS

• CVE-2026-16247 2026-07-20 · CVSS 7.3
  In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData%
• CVE-2026-16246 2026-07-20 · CVSS 7.3
  In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control ov
• CVE-2025-12509 2025-10-31 · CVSS 8.4
  On a client with an admin user, a Global_Shipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights.
• CVE-2025-12508 2025-10-31 · CVSS 8.4
  When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data a
• CVE-2025-12507 2025-10-31 · CVSS 8.8
  The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious progr
• CVE-2025-6512 2025-06-23 · CVSS 10.0
  On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.
• CVE-2025-6513 2025-06-23 · CVSS 9.3
  Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it.
• CVE-2025-2820 2025-03-26 · CVSS 6.5
  An authenticated attacker can compromise the availability of the device via the network
• CVE-2025-2819 2025-03-26 · CVSS 6.6
  There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This