Newforma Info Exchange SMB Connection Vulnerability via MarkupServices.ashx

A vulnerability in Newforma Info Exchange (NIX) allows remote, unauthenticated attackers to induce the application to establish an SMB connection with an attacker-controlled system. This exploitation enables the attacker to capture the NTLMv2 hash of the NIX service account configured by the customer. The issue is present in NIX versions prior to 2023.2.

Impact

Exploitation of this vulnerability forces NTLMv2 authentication to an attacker-controlled system, potentially allowing the capture of sensitive authentication hashes.