← Database

CVE-2025-11696

N/A CVSS: N/A Published: 2025-11-11 Modified: 2026-06-17

Description

A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.

Affected Platforms

Unknown

Weakness Type

CWE-22

References