CVE-2023-29446 — Improper Input Validation in PTC's Kepware KEPServerEX
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to captu…
Published: 2024-01-10 · CVSS: 4.7 · CVSS 3.1
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7