← Back

CVE-2025-12507

nvd nist
Published: Oct 31, 2025Modified: Nov 4, 2025

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6 (Secondary)

Description

The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed.

Related CWEs

CWE-428
Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (1)

Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6

Timeline

No history available yet.