The vulnerability in Tobit Laboratories AG TeamDavid's Webbox component involves improper input validation of the 'pathname' parameter in the link storing functionality (//ServerClient_celink.htm). The parameter can be set to UNC paths (e.g., \\Server\Share), which the server processes without validation, causing it to initiate outbound SMB connections to attacker-controlled endpoints. This behavior can be exploited without authentication to force the server to authenticate to arbitrary SMB servers, potentially exposing NTLM authentication hashes. If outbound connections to SMB port 445 are permitted, attackers may conduct SMB relay or credential theft attacks. The issue affects TeamDavid through Rollout 524. No official remediation or patch has been indicated in the available data.

An attacker can exploit this vulnerability without authentication to cause the server to connect to attacker-controlled SMB servers, potentially exposing NTLM authentication credentials. This can lead to SMB relay attacks or credential theft if network conditions allow outbound SMB connections on port 445. The exposure of NTLM hashes can compromise user credentials and lead to further network compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict outbound SMB connections (port 445) from the affected server to untrusted networks to mitigate the risk of SMB relay or credential theft attacks. Monitor network policies to prevent unauthorized SMB traffic. Avoid using untrusted input for the 'pathname' parameter if possible.