Bizerba BRAIN2 Global Shipping Script Execution Vulnerability

A vulnerability exists in Bizerba BRAIN2 versions prior to 3.07, allowing admin users to implement Global_Shipping scripts on their client. These scripts could then be executed on the BRAIN2 server with administrator rights.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary scripts with administrative privileges on the BRAIN2 server.

Remediation

Users can update to BRAIN2 version 3.07, which prevents the implementation of Global_Shipping scripts and removes any existing scripts from the system. Alternatively, BRAIN2 users can be deprived of the right to implement Global_Shipping scripts.