CVE-2025-11696 — Studio 5000 ® Simulation Interface SSRF
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system …
Published: 2025-11-11 · CVSS: 8.9 · CVSS 4.0
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7