Connect.Brain
Approved changes feed: RSS · Atom
cpe:2.3:a:bizerba_se_&_co._kg:_connect.brain:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bizerba Se & Co. Kg (c99fad49-13ff-50d5-8dd4-de98580e21fd) |
|---|---|
| Product | Connect.Brain (8dd66b0b-8fb2-5446-90e0-6d428f89469d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16247 |
vulnerable | 2026-07-29 00:26:18.629144 |
Insecure permission overwrite due to execution of LogPathConfig.exe while installing _connect.BRAIN
HIGH (7.3)
In _connect.BRAIN versions prior to 5.06,
the application LogPathConfig.exe is executed during setup. During this
process, existing permissions on %ProgramData% are deleted and replaced,
granting the Windows group Everyone full control instead of restricting
access to %ProgramData%\Bizerba\_connect.BRAIN or %ProgramData%\Bizerba\BCT.
Starting with _connect.BRAIN 5.06,
the setup no longer executes this tool.
Published: 2026-07-20T11:54:37.566Z
Updated: 2026-07-20T12:55:40.988Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.