PT-2025-44647 · Bizerba · Bizerba Brain2

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-12509

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bizerba BRAIN2 (affected versions not specified)

Description An attacker with administrator privileges on a client machine can implement or manipulate a Global Shipping script. This script can then be executed on the BRAIN2 server with administrator rights, potentially leading to full administrative control of the server. The vulnerability involves the execution of a script, Global Shipping, with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2025-12509

Affected Products

Bizerba Brain2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-12509 · Security Note
• https://twitter.com/CVEnew/status/1984312781274038352 · Twitter Post
• https://twitter.com/CveTodo/status/1984297410827264089 · Twitter Post
• https://bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0007.pdf · Note
• https://t.me/CVEtracker/36317 · Telegram Post