CVE-2023-50916 Information disclosure in n/a
Attackers can force NTLM credential exposure by setting a malicious UNC backup path, enabling credential relaying or cracking attacks against the application.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-50916?
CVE-2023-50916 is a high-severity vulnerability in n/a, published on 10 Jan 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a UNC path via the GUI is rejected due to the use of a \ (backslash) character, which is supposed to be disallowed in a pathname. Intercepting and modifying this request via a proxy, or sending the request directly to the application endpoint, allows UNC paths to be set for the backup location. Once such a location is set, Kyocera Device Manager attempts to confirm access and will try to authenticate to the UNC path; depending on the configuration of the environment, this may authenticate to the UNC with Windows NTLM hashes. This could allow NTLM credential relaying or cracking attacks.
Weakness: CWE-22
Which versions are affected by CVE-2023-50916?
It affects 1 product.
Products include Kyocera Device Manager.
How do I fix CVE-2023-50916?
No fix has been published for CVE-2023-50916 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-50916 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-50916 exists.
Sources
Also known as GHSA-8982-h69p-3jrw.