Newforma Info Exchange SMB Connection Vulnerability via IntegrationServices.ashx

A vulnerability in Newforma Info Exchange (NIX) allows remote, unauthenticated attackers to induce the application to establish an SMB connection with an attacker-controlled system. This exploitation enables the attacker to capture the NTLMv2 hash of the NIX service account. The issue is present in NIX versions prior to 2024.3.

Impact

Exploitation of this vulnerability allows for forced NTLMv2 authentication, enabling the capture of NTLMv2 hashes, which could be used in pass-the-hash attacks or to impersonate the NIX service account.