Newforma Info Exchange NTLMv2 Authentication Bypass Vulnerability via LegacyIntegrationServices

A vulnerability in Newforma Info Exchange (NIX) has been identified, specifically in the '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' endpoint. This vulnerability allows remote, unauthenticated attackers to manipulate NIX into establishing an SMB connection with an attacker-controlled system. Consequently, the attacker can intercept the NTLMv2 hash of the user-configured NIX service account.

Impact

Exploitation of this vulnerability leads to an unauthorized capture of NTLMv2 authentication hashes, which can be used in pass-the-hash attacks or to impersonate the service account.