{"id":73394,"date":"2025-11-11T17:45:34","date_gmt":"2025-11-11T14:15:34","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-11696-studio-5000-simulation-interface-ssrf\/"},"modified":"2025-11-11T17:45:34","modified_gmt":"2025-11-11T14:15:34","slug":"cve-2025-11696-studio-5000-simulation-interface-ssrf","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-11696-studio-5000-simulation-interface-ssrf\/","title":{"rendered":"CVE-2025-11696 &#8211; Studio 5000 \u00ae Simulation Interface SSRF"},"content":{"rendered":"<p>CVE ID : CVE-2025-11696<\/p>\n<p>Published :  Nov. 11, 2025, 2:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago<\/p>\n<p>Description : A local server-side request forgery (SSRF) security issue exists within Studio 5000\u00ae Simulation Interface\u2122 via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.<\/p>\n<p>Severity: 8.9 | HIGH<\/p>\n<p>Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-11696 Published : Nov. 11, 2025, 2:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago Description : A local server-side request forgery (SSRF) security issue exists within Studio 5000\u00ae Simulation Interface\u2122 via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes. Severity: &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-73394","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/73394","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=73394"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/73394\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=73394"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=73394"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=73394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}