CVE-2026-112250

Full vulnerability record from the local CVENow database.

Description

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using Integrated Security and the Windows account intended to run the BRAIN2 MainService is specified during execution of the BRAIN2 installation wizard. The setup log file is stored in the temporary directory of the Windows administrator performing the installation. This directory is not accessible to standard Windows users and can generally only be accessed by users with administrative privileges. Successful exploitation could result in the disclosure of credentials belonging to the configured BRAIN2 service account.

Severity

MEDIUM

CVSS score

4.4 (v3.1)

Vulnerability status

Deferred

Source identifier

0beee27a-7d8c-424f-8e46-ac453fa147e6

Published

2026-10-26 10:16:51.337000

Last modified

2026-10-26 17:11:35.487000

View original CVE JSON

{
  "id": "CVE-2026-112250",
  "sourceIdentifier": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
  "published": "2026-10-26T10:16:51.337",
  "lastModified": "2026-10-26T17:11:35.487",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file. The issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard. The setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges. Successful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account."
    }
  ],
  "affected": [
    {
      "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
      "affectedData": [
        {
          "vendor": "Bizerba SE & Co. KG",
          "product": "BRAIN2",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "x86",
            "64 bit"
          ],
          "versions": [
            {
              "version": "0.0",
              "lessThan": "3.10",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-10-26T13:24:21.499585Z",
          "id": "CVE-2026-112250",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0004.pdf",
      "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6"
    }
  ]
}