Beveiligingsadvies

CVE-2025-1868

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-03 10:53:44
Laatst bijgewerkt 2025-03-03 12:06:33
Toegewezen door INCIBE
CVSS-score 6.9
Status PUBLISHED

Beschrijving

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols.