CVE-2025-12508

Summary

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.

Affected Software

VendorProductVersion RangeStatus
BizerbaBRAIN20.0 < 3.07affected

Weaknesses

  • CWE-319: CWE-319 Cleartext Transmission of Sensitive Information

Workarounds

Do not use domain users as BRAIN2 users in unprotected networks. Use local BRAIN2 users instead.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References