CVE-2023-29446 (published 2024-01-10T20:21:51.434Z)
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline. 
Affected products: Vendor: PTC
Product: Kepware KEPServerEX
Versions: 0