CVE-2023-50916

CVE-2023-50916 is a high-severity vulnerability affecting Kyocera Device Manager before version 3.1.1213.0, allowing NTLM credential exposure. An authenticated attacker can bypass input validation to set a UNC path for database backups, leading to the application attempting NTLM authentication to a malicious server. This enables NTLM credential relaying or cracking attacks, with a CVSS score of 7.2 (High). While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.