https://vulnogram.org/ Most recent CVEs assigned by Bizerba SE & Co. KG (bizerba). https://vulnogram.org/seaview/icons/bizerba.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-16247 https://vulnogram.org/CVE-2026-16247 In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and replaced, granting the Windows group Everyone full control instead of res… High Mon, 20 Jul 2026 11:54:37 GMT https://vulnogram.org/CVE-2026-16246 https://vulnogram.org/CVE-2026-16246 In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2\. Starting wi… High Mon, 20 Jul 2026 11:51:40 GMT https://vulnogram.org/CVE-2025-12509 https://vulnogram.org/CVE-2025-12509 On a client with an admin user, a Global_Shipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights. High Fri, 31 Oct 2025 15:51:25 GMT https://vulnogram.org/CVE-2025-12508 https://vulnogram.org/CVE-2025-12508 When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality. High Fri, 31 Oct 2025 15:49:54 GMT https://vulnogram.org/CVE-2025-12507 https://vulnogram.org/CVE-2025-12507 The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed. High Fri, 31 Oct 2025 15:48:36 GMT https://vulnogram.org/CVE-2025-6512 https://vulnogram.org/CVE-2025-6512 On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights. Critical Network Exploitable Mon, 23 Jun 2025 12:48:33 GMT https://vulnogram.org/CVE-2025-6513 https://vulnogram.org/CVE-2025-6513 Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it. Critical Mon, 23 Jun 2025 12:37:55 GMT https://vulnogram.org/CVE-2025-2820 https://vulnogram.org/CVE-2025-2820 An authenticated attacker can compromise the availability of the device via the network Medium Wed, 26 Mar 2025 14:58:09 GMT https://vulnogram.org/CVE-2025-2819 https://vulnogram.org/CVE-2025-2819 There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged… Medium Wed, 26 Mar 2025 14:49:38 GMT