TI-2025-05912 CVE-2025-6512 · GHSA-hfr2-mw2v-5fh3
Scripts within reports executable on BRAIN2 Server
Priority MEDIUM 50
On a client with a non-admin user, a script can be integrated into a report.
Bizerba SE & Co. KG
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Bizerba SE & Co. KG records in CISA KEVNo Bizerba SE & Co. KG vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2025-05913 CVE-2025-6513 · GHSA-7f9h-3v62-fx27
BRAIN2 Configuration file for database access not sufficiently secured
Priority MEDIUM 41
Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it.
TI-2026-13585 CVE-2026-16247 · GHSA-gxr5-ww5q-wmqx
Insecure permission overwrite due to execution of LogPathConfig.exe while installing _connect.BRAIN
Priority LOW 33
In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup.
TI-2026-13584 CVE-2026-16246 · GHSA-r977-vhwm-4c47
Insecure permission assignment due to execution of LogPathConfig.exe during setup
Priority LOW 31
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup.
TI-2025-02464 CVE-2025-2820 · GHSA-495w-c474-hvvj
Denial of service in Bizerba SE & Co. KG Product family GLx and CWx
Priority LOW 30
An authenticated attacker can compromise the availability of the device via the network
TI-2025-02463 CVE-2025-2819 · GHSA-j6w5-x2v9-vjvh
Unrestricted Fileupload
Priority LOW 29
There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process.
TI-2026-80307 CVE-2026-112250 · GHSA-p6ch-jxpp-q2jv
Cleartext service account password in BRAIN2 setup log files
Priority LOW 20
A vulnerability has been identified in BRAIN2 versions up to and including version 3.09.