CVE-2025-1887: SMB forced authentication vulnerability in Sage 200 Spain
SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1887?
CVE-2025-1887 is considered a high severity vulnerability due to its potential for allowing unauthorized access to sensitive information.
How do I fix CVE-2025-1887?
To fix CVE-2025-1887, upgrade your Sage 200 Spain software to version 2025.35.000 or later.
Who is affected by CVE-2025-1887?
CVE-2025-1887 affects users of Sage 200 Spain versions prior to 2025.35.000.
What type of attack exploits CVE-2025-1887?
CVE-2025-1887 can be exploited by an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash.
What can an attacker do with CVE-2025-1887?
An attacker exploiting CVE-2025-1887 can potentially gain access to administrative credentials through the extraction of NTLMv2-SSP Hash.