Unencrypted Communication Vulnerability in Active Directory Services by Bizerba
CVE-2025-12508

8.4HIGH

Key Information:

Vendor

Bizerba

Status
Vendor
CVE Published:
31 October 2025

What is CVE-2025-12508?

The vulnerability found in Bizerba's BRAIN2 system allows domain users to communicate with Active Directory services without encryption. This serious issue can result in the interception of sensitive authentication data, posing a significant risk to user confidentiality and system integrity. Organizations using Bizerba products are encouraged to adopt appropriate security measures to mitigate this risk.

Affected Version(s)

BRAIN2 Windows 0.0 < 3.07

References

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-12508 : Unencrypted Communication Vulnerability in Active Directory Services by Bizerba