NTLM Hash Exposure in SAP GUI for Windows by SAP

CVE-2025-42943

What is CVE-2025-42943?

The SAP GUI for Windows is susceptible to a vulnerability that may lead to the leakage of NTLM hashes when certain ABAP frontend services are accessed using UNC paths. Successful exploitation demands that an attacker possess developer authorization on a targeted Application Server ABAP and that the victim unwittingly initiates operations through the SAP GUI for Windows. This scenario may automatically engage NTLM authentication, potentially allowing adversaries to capture hashed credentials, thereby threatening sensitive data confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References