38 matches found
CVE-2026-16246 Insecure permission assignment due to execution of LogPathConfig.exe during setup
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...
CVE-2026-16246
In BRAIN2, versions prior to 3.09 run LogPathConfig.exe during setup, granting the Everyone group full control over %ProgramData% (not restricted to %ProgramData%\Bizerba\BRAIN2). Starting with 3.09, the setup no longer executes this tool, mitigating the issue for the main installer. However, the...
CVE-2026-16246
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...
EUVD-2026-45902
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...
CVE-2026-16246: Incorrect Default Permissions
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...
The vulnerability of the Bizerba BRAIN2 industrial software platform, related to improper code generation, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Bizerba BRAIN2 industrial software platform is related to improper code generation management. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2025-12508
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...
CVE-2025-12509
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509 Scripts for the module Global_Shipping executable on BRAIN2 Server
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509 Scripts for the module Global_Shipping executable on BRAIN2 Server
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509
CVE-2025-12509 affects Bizerba BRAIN2. A Global_Shipping script can be introduced by an admin on a client and then executed on the BRAIN2 server with administrator rights, potentially giving full administrative control of the server. Root cause: execution of a privileged script across components ...
CVE-2025-12508 Unencrypted communication to Active Directory services
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...
CVE-2025-12508 Unencrypted communication to Active Directory services
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...
Bizerba BRAIN2 安全漏洞
Bizerba BRAIN2 is an industrial software platform from Bizerba, Germany. A security vulnerability exists in Bizerba BRAIN2 that stems from a GlobalShipping script that may be executed with administrator privileges, potentially resulting in elevated privileges...
Bizerba BRAIN2 安全漏洞
Bizerba BRAIN2 is an industrial software platform from Bizerba, Germany. A security vulnerability exists in Bizerba BRAIN2 that stems from unencrypted communication when using Active Directory services, which could lead to interception of authentication data and compromise of confidentiality...
PT-2025-44646
Name of the Vulnerable Software and Affected Versions BRAIN2 affected versions not specified Description When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This allows for the interception of authentication data, potentially compromising...
PT-2025-44647
Name of the Vulnerable Software and Affected Versions Bizerba BRAIN2 affected versions not specified Description An attacker with administrator privileges on a client machine can implement or manipulate a Global Shipping script. This script can then be executed on the BRAIN2 server with...
CVE-2025-12509: Inclusion of Functionality from Untrusted Control Sphere
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12508: Cleartext Transmission of Sensitive Information
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...