CVE-2025-12507
The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- EPSS probability
- 0.13%
- CWE
- CWE-428
- Published
- 2025-10-31
- Last modified
- 2026-03-13
Affected products
- Bizerba _connect.BRAIN
Weakness type
Related vulnerabilities
- CVE-2026-77827 — Maono Link local privilege escalation
- CVE-2026-66839 — NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path...
- CVE-2026-18755 — GV-ASManager DLL hijacking vulnerability
- CVE-2026-9128 — Studio 5000 Logix Designer® – Multiple Vulnerabilities
- CVE-2026-8864 — HP Fan Control App – Potential Escalation of Privilege
- CVE-2025-71326 — AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation
- CVE-2023-54353 — Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation
- CVE-2022-50971 — Malwarebytes 4.5 Unquoted Service Path Privilege Escalation