Vulnerability-Lookup

GHSA-R977-VHWM-4C47

Vulnerability from github – Published: 2026-07-20 12:33 – Updated: 2026-07-20 12:33

Details

Starting with BRAIN2 3.09, the setup no longer executes this tool.

However, the optional component Bizerba ScriptService still executes it.

Bizerba ScriptService is being deprecated and will no longer be included starting with BRAIN2 version 3.11.

Severity

7.3 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-16246"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-276"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-20T12:17:56Z",
    "severity": "HIGH"
  },
  "details": "In BRAIN2 versions prior to 3.09, the\napplication LogPathConfig.exe is executed during setup. As a result, the\nWindows group Everyone is granted full control over %ProgramData% instead of\nbeing restricted to %ProgramData%\\Bizerba\\BRAIN2\\.\n\n\n\n\n\nStarting with BRAIN2 3.09, the setup no\nlonger executes this tool.\n\nHowever, the optional component Bizerba ScriptService still executes it.\n\n\n\n\n\nBizerba ScriptService is being\ndeprecated and will no longer be included starting with BRAIN2 version 3.11.",
  "id": "GHSA-r977-vhwm-4c47",
  "modified": "2026-07-20T12:33:08Z",
  "published": "2026-07-20T12:33:08Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16246"
    },
    {
      "type": "WEB",
      "url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0003.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2026-16246 (GCVE-0-2026-16246)

Vulnerability from cvelistv5 – Published: 2026-07-20 11:51 – Updated: 2026-07-20 13:02

Title

Insecure permission assignment due to execution of LogPathConfig.exe during setup

Summary

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2\. Starting with BRAIN2 3.09, the setup no longer executes this tool. However, the optional component Bizerba ScriptService still executes it. Bizerba ScriptService is being deprecated and will no longer be included starting with BRAIN2 version 3.11.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-276 - Incorrect default permissions

Assigner

bizerba

References

1 reference

URL	Tags
https://www.bizerba.com/downloads/global/informat…

Impacted products

1 product

Vendor	Product	Version
Bizerba SE & Co. KG	BRAIN2	Affected: >3.09

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16246",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-20T13:02:39.900691Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T13:02:48.220Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "BRAIN2",
          "vendor": "Bizerba SE \u0026 Co. KG",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e3.09"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cb\u003eIn BRAIN2 versions prior to 3.09, the\napplication LogPathConfig.exe is executed during setup. As a result, the\nWindows group Everyone is granted full control over %ProgramData% instead of\nbeing restricted to %ProgramData%\\Bizerba\\BRAIN2\\.\u003c/b\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eStarting with BRAIN2 3.09, the setup no\nlonger executes this tool.\u003cbr\u003e\nHowever, the optional component Bizerba ScriptService still executes it.\u003c/b\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eBizerba ScriptService is being\ndeprecated and will no longer be included starting with BRAIN2 version 3.11.\u003c/b\u003e\u003c/p\u003e"
            }
          ],
          "value": "In BRAIN2 versions prior to 3.09, the\napplication LogPathConfig.exe is executed during setup. As a result, the\nWindows group Everyone is granted full control over %ProgramData% instead of\nbeing restricted to %ProgramData%\\Bizerba\\BRAIN2\\.\n\n\n\n\n\nStarting with BRAIN2 3.09, the setup no\nlonger executes this tool.\n\nHowever, the optional component Bizerba ScriptService still executes it.\n\n\n\n\n\nBizerba ScriptService is being\ndeprecated and will no longer be included starting with BRAIN2 version 3.11."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "CWE-276 Incorrect default permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-20T11:55:07.681Z",
        "orgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
        "shortName": "bizerba"
      },
      "references": [
        {
          "url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0003.pdf"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cul\u003e\n \u003cli\u003e\u003cb\u003eUpgrade to BRAIN2 version 3.09 or later\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eImportant: An update alone does not remove the incorrectly\n     assigned permissions on %ProgramData%. These permissions must be manually\n     corrected by a Windows administrator.\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eOnly a fresh installation of BRAIN2 3.09 or later without\n     installing Bizerba ScriptService prevents the issue during setup.\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eDo not install Bizerba ScriptService and use the BRAIN2 Device\n     Control Service instead\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eStarting with BRAIN2 3.11, Bizerba ScriptService will no longer\n     be included in the delivery\u003c/b\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cdiv\u003e\u003cb\u003e\n\n\n\n\u003c/b\u003e\u003c/div\u003e"
            }
          ],
          "value": "*  Upgrade to BRAIN2 version 3.09 or later\n\n   *  Important: An update alone does not remove the incorrectly\n     assigned permissions on %ProgramData%. These permissions must be manually\n     corrected by a Windows administrator.\n\n   *  Only a fresh installation of BRAIN2 3.09 or later without\n     installing Bizerba ScriptService prevents the issue during setup.\n\n   *  Do not install Bizerba ScriptService and use the BRAIN2 Device\n     Control Service instead\n\n   *  Starting with BRAIN2 3.11, Bizerba ScriptService will no longer\n     be included in the delivery"
        }
      ],
      "source": {
        "advisory": "BIZERBA-SA-2026-0003",
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-07T22:00:00.000Z",
          "value": "Release of BRAIN2 3.09"
        }
      ],
      "title": "Insecure permission assignment due to execution of LogPathConfig.exe during setup",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cb\u003eAn automatic correction is not possible,\nas modifying permissions on %ProgramData% may affect the functionality of other\nsoftware installed on the system.\u003c/b\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cb\u003eA Windows administrator can reduce the\nrisk by:\u003c/b\u003e\u003c/p\u003e\n\n\u003cul\u003e\n \u003cli\u003e\u003cb\u003eremoving full control permissions for Everyone on %ProgramData%,\n     and\u003c/b\u003e\u003c/li\u003e\n \u003cli\u003e\u003cb\u003eassigning the required permissions specifically to\n     %ProgramData%\\Bizerba\\BRAIN2\\\u003c/b\u003e\u003c/li\u003e\n\u003c/ul\u003e"
            }
          ],
          "value": "An automatic correction is not possible,\nas modifying permissions on %ProgramData% may affect the functionality of other\nsoftware installed on the system.\n\n\n\n\n\nA Windows administrator can reduce the\nrisk by:\n\n\n\n\n   *  removing full control permissions for Everyone on %ProgramData%,\n     and\n\n   *  assigning the required permissions specifically to\n     %ProgramData%\\Bizerba\\BRAIN2\\"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6",
    "assignerShortName": "bizerba",
    "cveId": "CVE-2026-16246",
    "datePublished": "2026-07-20T11:51:40.416Z",
    "dateReserved": "2026-07-20T06:59:08.963Z",
    "dateUpdated": "2026-07-20T13:02:48.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

GHSA-R977-VHWM-4C47

CVE-2026-16246 (GCVE-0-2026-16246)

Tags

Sightings

Nomenclature