CVE-2025-1868 Information display on multiple products from Famatech Corp
Attackers can intercept network traffic to steal NTLM hashes when users run scans with Advanced IP or Port Scanner.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-1868?
CVE-2025-1868 is a medium-severity vulnerability in Famatech Corp Advanced IP Scanner, published on 3 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols.
Weakness: CWE-200
Which versions are affected by CVE-2025-1868?
How do I fix CVE-2025-1868?
No fix has been published for CVE-2025-1868 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-1868 being exploited?
There is no known exploitation of CVE-2025-1868 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.