Approved changes feed: RSS · Atom
cpe:2.3:a:bizerba_se_&_co._kg:brain2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bizerba Se & Co. Kg (c99fad49-13ff-50d5-8dd4-de98580e21fd) |
|---|---|
| Product | Brain2 (59ca4201-383a-5f8c-89bf-f8038f416354) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16246 |
vulnerable | 2026-07-29 00:26:18.625107 |
Insecure permission assignment due to execution of LogPathConfig.exe during setup
HIGH (7.3)
In BRAIN2 versions prior to 3.09, the
application LogPathConfig.exe is executed during setup. As a result, the
Windows group Everyone is granted full control over %ProgramData% instead of
being restricted to %ProgramData%\Bizerba\BRAIN2\.
Starting with BRAIN2 3.09, the setup no
longer executes this tool.
However, the optional component Bizerba ScriptService still executes it.
Bizerba ScriptService is being
deprecated and will no longer be included starting with BRAIN2 version 3.11.
Published: 2026-07-20T11:51:40.416Z
Updated: 2026-07-20T13:02:48.220Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6513 |
vulnerable | 2026-06-08 07:43:15.189182 |
BRAIN2 Configuration file for database access not sufficiently secured
CRITICAL (9.3)
Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it.
Published: 2025-06-23T12:37:55.000Z
Updated: 2025-06-23T13:25:56.804Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6512 |
vulnerable | 2026-06-08 07:43:15.188821 |
Scripts within reports executable on BRAIN2 Server
CRITICAL (10)
On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.
Published: 2025-06-23T12:48:33.951Z
Updated: 2025-06-23T13:22:47.485Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.