Required CVE Record Information
Description
Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols.
CVSS 1 Total
Score | Severity | Version | Vector String |
---|---|---|---|
6.9 | MEDIUM | 4.0 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Product Status
Learn moreVersions 1 Total
Default Status: unaffected
unaffected
Versions 1 Total
Default Status: unaffected
unaffected
Credits
- Francisco Javier Medina Munuera finder
- Pedro Gabaldón Juliá finder
- Alejandro Baño Andrés finder
- Antonio José Gálvez Sánchez finder