Vulnerability · Published Mar 7, 2025 · Assigned by INCIBE
CVE-2025-1887SMB forced authentication vulnerability in Sage 200 Spain
High 7.1
In plain English
A high-severity security flaw in Sage 200 Spain from Sage. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 4.0)7.1High
Exploit odds (30 days)0.4%top 69.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sage | Sage 200 Spain | 2025.35.000 |
Weakness: CWE-294 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N