Advanced IP Scanner and Advanced Port Scanner NTLM Hash Exposure Vulnerability

A vulnerability allowing unauthorized exposure of confidential information has been identified in Advanced IP Scanner (versions through 2.5.4594.1) and Advanced Port Scanner (versions through 2.5.3869). This vulnerability arises when the applications perform a network scan, unintentionally transmitting the NTLM hash of the user conducting the scan. The exposure can be exploited by intercepting network traffic to a legitimate server or by establishing a fake server, applicable in both local and remote contexts. This vulnerability affects HTTP, HTTPS, and SMB protocols.

Impact

Exploitation of this vulnerability leads to the unauthorized exposure of NTLM hashes, which can be used in NTLM relay attacks or to authenticate as the user in certain scenarios.