{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-112250",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-26T13:24:21.499585Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-26T14:35:18.697Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "x86",
            "64 bit"
          ],
          "product": "BRAIN2",
          "vendor": "Bizerba SE \u0026 Co. KG",
          "versions": [
            {
              "lessThan": "3.10",
              "status": "affected",
              "version": "0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file.\u0026nbsp;\u003cspan\u003eThe issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard.\u0026nbsp;\u003c/span\u003e\u003cspan\u003eThe setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges.\u0026nbsp;\u003c/span\u003e\u003cspan\u003eSuccessful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file.\u00a0The issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard.\u00a0The setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges.\u00a0Successful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of sensitive information into log file",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T09:41:29.352Z",
        "orgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
        "shortName": "bizerba"
      },
      "references": [
        {
          "url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0004.pdf"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThis vulnerability has been fixed in \u003cb\u003eBRAIN2\nversion 3.10\u003c/b\u003e.\u003c/p\u003e\n\n\u003cp\u003eCustomers are strongly advised to upgrade\nto \u003cb\u003eBRAIN2 version 3.10 or later\u003c/b\u003e.\u003c/p\u003e"
            }
          ],
          "value": "This vulnerability has been fixed in BRAIN2\nversion 3.10.\n\n\n\n\n\nCustomers are strongly advised to upgrade\nto BRAIN2 version 3.10 or later."
        }
      ],
      "source": {
        "advisory": "BIZERBA-SA-2026-0004",
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-25T07:51:00.000Z",
          "value": "Vulnerability identified"
        },
        {
          "lang": "en",
          "time": "2026-10-02T07:51:00.000Z",
          "value": "Fix Available in Brain2 3.10"
        }
      ],
      "title": "Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUntil an upgrade can be applied, Bizerba\nrecommends implementing the following measures:\u003c/p\u003e\n\n\u003cp\u003e\u00b7\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\nDelete BRAIN2 installation log\nfiles after successful installation.\u003c/p\u003e\n\n\u003cp\u003e\u00b7\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\nRestrict administrative access\nto affected systems.\u003c/p\u003e\n\n\u003cp\u003e\u00b7\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\nEnsure temporary directories\ncontaining installation artifacts are adequately protected.\u003c/p\u003e\n\n\u003cp\u003e\u00b7\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\nChange the password of the\nconfigured service account if credential exposure is suspected.\u003c/p\u003e\n\n\u003cp\u003eAdministrators should review and remove\nsetup log files following the naming convention:\u003c/p\u003e\n\n\u003ctable\u003e\n \u003ctbody\u003e\u003ctr\u003e\n  \u003ctd\u003e\n  \u003cp\u003eBizerba\n  BRAIN2_\u0026lt;Version\u0026gt;_\u0026lt;InstallationDate\u0026gt;_\u0026lt;InstallationTime\u0026gt;_setup.log\u003c/p\u003e\n  \u003c/td\u003e\n \u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Until an upgrade can be applied, Bizerba\nrecommends implementing the following measures:\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nDelete BRAIN2 installation log\nfiles after successful installation.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nRestrict administrative access\nto affected systems.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nEnsure temporary directories\ncontaining installation artifacts are adequately protected.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nChange the password of the\nconfigured service account if credential exposure is suspected.\n\n\n\n\n\nAdministrators should review and remove\nsetup log files following the naming convention:\n\n\n\n\n \n  \n  \n\nBizerba\n  BRAIN2_\u003cVersion\u003e_\u003cInstallationDate\u003e_\u003cInstallationTime\u003e_setup.log"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
    "assignerShortName": "bizerba",
    "cveId": "CVE-2026-112250",
    "datePublished": "2026-10-26T09:41:29.352Z",
    "dateReserved": "2026-10-19T12:52:16.085Z",
    "dateUpdated": "2026-10-26T14:35:18.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16246",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-20T13:02:39.900691Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T13:02:48.220Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "BRAIN2",
          "vendor": "Bizerba SE \u0026 Co. KG",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e3.09"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cb\u003eIn BRAIN2 versions prior to 3.09, the\napplication LogPathConfig.exe is executed during setup. As a result, the\nWindows group Everyone is granted full control over %ProgramData% instead of\nbeing restricted to %ProgramData%\\Bizerba\\BRAIN2\\.\u003c/b\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eStarting with BRAIN2 3.09, the setup no\nlonger executes this tool.\u003cbr\u003e\nHowever, the optional component Bizerba ScriptService still executes it.\u003c/b\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eBizerba ScriptService is being\ndeprecated and will no longer be included starting with BRAIN2 version 3.11.\u003c/b\u003e\u003c/p\u003e"
            }
          ],
          "value": "In BRAIN2 versions prior to 3.09, the\napplication LogPathConfig.exe is executed during setup. As a result, the\nWindows group Everyone is granted full control over %ProgramData% instead of\nbeing restricted to %ProgramData%\\Bizerba\\BRAIN2\\.\n\n\n\n\n\nStarting with BRAIN2 3.09, the setup no\nlonger executes this tool.\n\nHowever, the optional component Bizerba ScriptService still executes it.\n\n\n\n\n\nBizerba ScriptService is being\ndeprecated and will no longer be included starting with BRAIN2 version 3.11."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "CWE-276 Incorrect default permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-20T11:55:07.681Z",
        "orgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
        "shortName": "bizerba"
      },
      "references": [
        {
          "url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0003.pdf"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cul\u003e\n \u003cli\u003e\u003cb\u003eUpgrade to BRAIN2 version 3.09 or later\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eImportant: An update alone does not remove the incorrectly\n     assigned permissions on %ProgramData%. These permissions must be manually\n     corrected by a Windows administrator.\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eOnly a fresh installation of BRAIN2 3.09 or later without\n     installing Bizerba ScriptService prevents the issue during setup.\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eDo not install Bizerba ScriptService and use the BRAIN2 Device\n     Control Service instead\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eStarting with BRAIN2 3.11, Bizerba ScriptService will no longer\n     be included in the delivery\u003c/b\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cdiv\u003e\u003cb\u003e\n\n\n\n\u003c/b\u003e\u003c/div\u003e"
            }
          ],
          "value": "*  Upgrade to BRAIN2 version 3.09 or later\n\n   *  Important: An update alone does not remove the incorrectly\n     assigned permissions on %ProgramData%. These permissions must be manually\n     corrected by a Windows administrator.\n\n   *  Only a fresh installation of BRAIN2 3.09 or later without\n     installing Bizerba ScriptService prevents the issue during setup.\n\n   *  Do not install Bizerba ScriptService and use the BRAIN2 Device\n     Control Service instead\n\n   *  Starting with BRAIN2 3.11, Bizerba ScriptService will no longer\n     be included in the delivery"
        }
      ],
      "source": {
        "advisory": "BIZERBA-SA-2026-0003",
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-07T22:00:00.000Z",
          "value": "Release of BRAIN2 3.09"
        }
      ],
      "title": "Insecure permission assignment due to execution of LogPathConfig.exe during setup",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cb\u003eAn automatic correction is not possible,\nas modifying permissions on %ProgramData% may affect the functionality of other\nsoftware installed on the system.\u003c/b\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eA Windows administrator can reduce the\nrisk by:\u003c/b\u003e\u003c/p\u003e\n\n\u003cul\u003e\n \u003cli\u003e\u003cb\u003eremoving full control permissions for Everyone on %ProgramData%,\n     and\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eassigning the required permissions specifically to\n     %ProgramData%\\Bizerba\\BRAIN2\\\u003c/b\u003e\u003c/li\u003e\n\u003c/ul\u003e"
            }
          ],
          "value": "An automatic correction is not possible,\nas modifying permissions on %ProgramData% may affect the functionality of other\nsoftware installed on the system.\n\n\n\n\n\nA Windows administrator can reduce the\nrisk by:\n\n\n\n\n   *  removing full control permissions for Everyone on %ProgramData%,\n     and\n\n   *  assigning the required permissions specifically to\n     %ProgramData%\\Bizerba\\BRAIN2\\"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
    "assignerShortName": "bizerba",
    "cveId": "CVE-2026-16246",
    "datePublished": "2026-07-20T11:51:40.416Z",
    "dateReserved": "2026-07-20T06:59:08.963Z",
    "dateUpdated": "2026-07-20T13:02:48.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-6512",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-23T13:22:41.924297Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-23T13:22:47.485Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "BRAIN2",
          "vendor": "Bizerba SE \u0026 Co. KG",
          "versions": [
            {
              "lessThan": "3.06",
              "status": "affected",
              "version": "0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2025-06-22T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights."
            }
          ],
          "value": "On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-23T12:48:33.951Z",
        "orgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
        "shortName": "bizerba"
      },
      "references": [
        {
          "url": "https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0004.pdf"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to the newest Version 3.06\u003cbr\u003e"
            }
          ],
          "value": "Update to the newest Version 3.06"
        }
      ],
      "source": {
        "advisory": "BIZERBA-SA-2025-0004",
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-06-22T22:00:00.000Z",
          "value": "Release of new Version BRAIN2 3.06"
        }
      ],
      "title": "Scripts within reports executable on BRAIN2 Server",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "BRAIN2 users can be deprived of the right to edit the reports\u003cbr\u003e"
            }
          ],
          "value": "BRAIN2 users can be deprived of the right to edit the reports"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
    "assignerShortName": "bizerba",
    "cveId": "CVE-2025-6512",
    "datePublished": "2025-06-23T12:48:33.951Z",
    "dateReserved": "2025-06-23T09:36:41.905Z",
    "dateUpdated": "2025-06-23T13:22:47.485Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-6513",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-23T13:25:51.725596Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-23T13:25:56.804Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "BRAIN2",
          "vendor": "Bizerba SE \u0026 Co. KG",
          "versions": [
            {
              "lessThan": "3.06",
              "status": "affected",
              "version": "0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2025-06-22T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it.\u003cbr\u003e"
            }
          ],
          "value": "Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-260",
              "description": "CWE-260: Password in Configuration File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-23T12:37:55.000Z",
        "orgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
        "shortName": "bizerba"
      },
      "references": [
        {
          "url": "https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0003.pdf"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to the newest Version 3.06\u003cbr\u003e"
            }
          ],
          "value": "Update to the newest Version 3.06"
        }
      ],
      "source": {
        "advisory": "BIZERBA-SA-2025-0003",
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-05-24T22:00:00.000Z",
          "value": "Release new BRAIN2 Version 3.06"
        }
      ],
      "title": "BRAIN2 Configuration file for database access not sufficiently secured",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cul\u003e\u003cli\u003eDeactivate not needed users or delete them\u003c/li\u003e\u003cli\u003eEnsure that only authorized users have access to the device/software\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "*  Deactivate not needed users or delete them\n  *  Ensure that only authorized users have access to the device/software"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
    "assignerShortName": "bizerba",
    "cveId": "CVE-2025-6513",
    "datePublished": "2025-06-23T12:37:55.000Z",
    "dateReserved": "2025-06-23T09:36:49.537Z",
    "dateUpdated": "2025-06-23T13:25:56.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}