CVE-2025-6513criticalCWE-260

CVE-2025-6513: critical vulnerability in Bizerba SE & Co. KG BRAIN2

BRAIN2 Configuration file for database access not sufficiently secured

Published

Follow this CVE+ Monitor BRAIN2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.2%
Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Bizerba SE & Co. KG · BRAIN2
Related CVEs — Bizerba SE & Co. KG BRAIN2

In the same product, most dangerous first.

CVE-2025-6512CRITICALScripts within reports executable on BRAIN2 ServerEPSS 0.5%CVE-2026-112250MEDIUMCleartext Storage of Windows Service Account Password in BRAIN2 Setup Log FilesEPSS 0.2%CVE-2026-16246HIGHInsecure permission assignment due to execution of LogPathConfig.exe during setupEPSS 0.2%