Vulnerability · Published Oct 31, 2025 · Assigned by bizerba
CVE-2025-12507Insecure service configuration – unquoted path
High 8.8
In plain English
A high-severity security flaw in _connect.BRAIN from Bizerba. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.1%top 96.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bizerba | _connect.BRAIN | 0.0 – before 5.02 |
Weakness: CWE-428 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H