Bizerba SE & Co. KG vulnerabilities
We track 3 vulnerabilities in Bizerba SE & Co. KG products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
Latest Bizerba SE & Co. KG vulnerabilities
- 7.3 High severity
_connect.BRAIN: Incorrect Default Permissions
In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and replaced, granting the Windows group Everyone full control instead of restricting a
- 7.3 High severity
BRAIN2: Incorrect Default Permissions
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2\. Starting with BRAIN2
- 10.0 Critical severity
BRAIN2: Improper Control of Generation of Code
On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.