Security Advisory
CVE-2025-11696
N/A
UNKNOWN
Vulnerability Description
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.
Published Date
November 11, 2025
Official Source
NIST NVD Advisory