PT-2025-44645 · Bizerba · Bizerba Communication Server

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-12507

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bizerba Communication Server (BCS) (affected versions not specified)

Description The Bizerba Communication Server (BCS) service has an unquoted service path. This occurs when the Windows service's executable path contains spaces but is not enclosed in quotes. This misconfiguration allows an attacker with local system access to potentially execute malicious code by exploiting the service startup process. The BCS is used in Bizerba's industrial or retail weighing solutions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2025-12507

Affected Products

Bizerba Communication Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-12507 · Security Note
• https://twitter.com/CveFindCom/status/1984299163777892428 · Twitter Post
• https://t.me/CVEtracker/36315 · Telegram Post
• https://twitter.com/CveTodo/status/1984296813101289897 · Twitter Post
• https://bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0005.pdf · Note
• https://twitter.com/VulmonFeeds/status/1984326651329593628 · Twitter Post
• https://twitter.com/CVEnew/status/1984312783266333162 · Twitter Post