CVE-2025-12508 - CVE House

Status published High CVE-2025-12508

Unencrypted communication to Active Directory services

8.4 CVSS

Vulnerability Description

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-12508

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0006.pdf

More from Bizerba

View All →

CVE-2025-12509

Scripts for the module Global_Shipping executable on BRAIN2 Server

High 8.4

CVE-2025-12507

Insecure service configuration – unquoted path

High 8.8

Affected Vendor

Bizerba

View all reports →

Affected Software

BRAIN2

Vulnerable Versions:

0.0

Timeline

Official Publish: October 31st, 2025

Last Modified: October 31st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-319

MITRE ATT&CK TTPs

T1040 Network Sniffing

Collection

T1557 Adversary-in-the-Middle

Credential Access

T1552 Unsecured Credentials