PT-2025-26594 · Brain2 · Brain2

Published 2025-06-23 · Updated 2025-06-28 · CVE-2025-6513

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: BRAIN2 versions 0.0 through 3.05

Description: The configuration file for database access of the BRAIN2 application is not sufficiently secured, allowing standard Windows users to access and decrypt it. This issue is related to the storage of passwords in configuration files.

Recommendations: For BRAIN2 versions 0.0 through 3.05, consider restricting access to the configuration file for database access to prevent unauthorized decryption. As a temporary workaround, limit the privileges of standard Windows users to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-260

Related Identifiers

CVE-2025-6513

Affected Products

Brain2

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-6513 · Security Note
• https://t.me/cvetracker/26832 · Telegram Post
• https://t.me/latest_high_impact_cve/2782 · Telegram Post
• https://twitter.com/CveFindCom/status/1937136370322923804 · Twitter Post
• https://bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0003.pdf · Note
• https://twitter.com/cracbot/status/1938915340152705351 · Twitter Post
• https://twitter.com/CVEnew/status/1937136611856167301 · Twitter Post