Bizerba BRAIN2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Bizerba BRAIN2: 2 record(s), with affected versions and fixes.
CVE-2025-12509
High · 8.4
CWE-829 Oct 31, 2025
Scripts for the module Global_Shipping executable on BRAIN2 Server
On a client with an admin user, a Global_Shipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights.
CVE-2025-12508
High · 8.4
CWE-319 Oct 31, 2025
Unencrypted communication to Active Directory services
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.