Vulnerabilidades de Bizerba
CVEs publicadas que afetam produtos de Bizerba: 3 registro(s), com severidade, exploração e correções.
CVE-2025-12509
Alta · 8.4
CWE-829 31/10/2025
Scripts for the module Global_Shipping executable on BRAIN2 Server
On a client with an admin user, a Global_Shipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights.
CVE-2025-12508
Alta · 8.4
CWE-319 31/10/2025
Unencrypted communication to Active Directory services
When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.
CVE-2025-12507
Alta · 8.8
CWE-428 31/10/2025
Insecure service configuration – unquoted path
The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed.