CVE-2025-6512

Scripts within reports executable on BRAIN2 Server PUBLISHED

Description (CNA)

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.

Affected (CNA)

Vendor / product	Versions
Bizerba SE & Co. KG / BRAIN2	affected 0.0 before 3.06

CWE

CWE-94

References

https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0004.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.