Bizerba BRAIN2 Database Access Configuration File Vulnerability Allowing Unauthorized Access and Decryption

A vulnerability exists in Bizerba BRAIN2 versions prior to 3.06, allowing standard Windows users to access and decrypt the database access configuration file. This issue arises because the file is not adequately secured, enabling unauthorized users to retrieve sensitive database connection information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to database credentials, potentially allowing for further exploitation of the application or its data.

Remediation

Users are advised to update to BRAIN2 version 3.06 or later. For those unable to update, deactivate or delete unnecessary user accounts and ensure that only authorized users have access to the application or device.