CVE-2025-6512

CRITICAL

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.

Affects 0 products across 2 vendors.

BCS7.19
CVSS 3.110.0
EPSS0.5%
Percentile38th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-94: Code Injection

Attacker injects arbitrary code that is executed by the application process.

Related Attack Patterns (CAPEC)
CAPEC-35 Leverage Executable Code in Non-Executable Files
via CWE-94
CAPEC-77 Manipulating User-Controlled Variables
via CWE-94
CAPEC-242 Code Injection
via CWE-94

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

A critical vulnerability in the BRAIN2 server allows a non-admin user to integrate a script into a report, which can later be executed with administrator rights, leading to full system compromise.

BSID: BS-2025-GLOBAL-038617-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-6512?
A critical vulnerability in the BRAIN2 server allows a non-admin user to integrate a script into a report, which can later be executed with administrator rights, leading to full system compromise.
What is the CVSS score for CVE-2025-6512?
CVE-2025-6512 has CVSS 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS: 0.5%.
Is CVE-2025-6512 actively exploited?
No confirmed active exploitation of CVE-2025-6512 as of 2026-05-30.
How do I remediate CVE-2025-6512?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-6512?
CVE-2025-6512 affects: Client, Script.
Vulnerability Details
CVE IDCVE-2025-6512
BSIDBS-2025-GLOBAL-038617-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published2025-06-23
Last Modified2026-04-15
ICS Relevance15%
Weakness (CWE)
SourceNVD
Official Description

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker with non-admin user privileges can craft a malicious script and embed it into a report. When the report is processed or viewed by the system, the script executes with elevated (administrator) permissions, potentially granting the attacker full control over the BRAIN2 server.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductFixed Version
Client —
Script —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: August 2026 | Threat Age: 409 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashc9f7e60d01ec7f01944dcde7d949ac36a66711cae4d2ee0e0a0ad879e8d04b1908c87803ba71b105ca9799b8f4873ea62606507655564befab14cfc5f79acc8a
Related CVEs affecting Client
CVE-2025-53624 10.0 The Docusaurus gists plugin adds a page to your Docusaurus instance, displayi... CVE-1999-0661 10.0 A system is running a version of software that was replaced with a Trojan Hor... CVE-2026-23693 10.0 ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elemen... CVE-2026-41070 10.0 openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN serve... CVE-2026-40089 9.9 Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. Th...
View all Client CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →