Bizerba BRAIN2 Unencrypted Active Directory Communication Vulnerability

A vulnerability exists in Bizerba BRAIN2 versions prior to 3.07, where communication with Active Directory services is unencrypted when domain users are used as BRAIN2 users. This flaw can result in the interception of authentication data, compromising confidentiality.

Impact

Exploitation of this vulnerability could lead to the interception of authentication data, allowing for potential unauthorized access or actions within the application or system.

Remediation

Users are advised to update to Bizerba BRAIN2 version 3.07 or later, and to avoid using domain users as BRAIN2 users in unprotected networks. Instead, local BRAIN2 users should be used.