Bizerba Communication Server Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Bizerba Communication Server (BCS) versions prior to 5.02, where the service has an unquoted service path. This misconfiguration allows Windows to improperly search for the executable, potentially leading to the execution of malicious programs. Such programs would run with system privileges.

Impact

Exploitation of this vulnerability could result in arbitrary code execution with system privileges.

Remediation

Users are advised to update to Bizerba Communication Server version 5.02 or later. For those using an earlier version, the service path can be enclosed in quotes within the Windows Registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BCS\ImagePath.