Bizerba BRAIN2 Server Script Execution Vulnerability via Reports

A critical vulnerability exists in Bizerba BRAIN2 Server versions prior to 3.06, allowing non-admin users to embed scripts into reports. These reports can later be executed on the BRAIN2 server with administrator privileges, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability allows for arbitrary script execution on the BRAIN2 server with admin rights, which could be used to perform unauthorized actions or access sensitive information.

Remediation

Users are advised to update to Bizerba BRAIN2 version 3.06 or later. Alternatively, BRAIN2 users can be deprived of the right to edit reports, preventing the integration of scripts.