VULNERABILITY INTELLIGENCE

CVE-2025-1887

CVSS score7.1 HIGH

EPSS probability0.36%

CISA KEVNot currently listed

Published2025-03-07

Last modified2026-06-17

Description

SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.