Bizerba vulnerabilities
Published CVEs affecting Bizerba products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-12509
High · 8.4
CWE-829 Oct 31, 2025
Scripts for the module Global_Shipping executable on BRAIN2 Server
On a client with an admin user, a Global_Shipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights.
CVE-2025-12508
High · 8.4
CWE-319 Oct 31, 2025
Unencrypted communication to Active Directory services
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.
CVE-2025-12507
High · 8.8
CWE-428 Oct 31, 2025
Insecure service configuration – unquoted path
The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed.