CVE-2025-35061 is a high-severity authentication bypass vulnerability in Newforma Project Center's Info Exchange (NIX) component. It allows a remote, unauthenticated attacker to trigger the system to initiate an SMB connection to an attacker-controlled server, capturing the NTLMv2 hash of the NIX service account. This vulnerability stems from improper authentication validation (CWE-294) in the LegacyIntegrationServices.asmx endpoint. Exploitation does not require user interaction or prior authentication, making it highly accessible. Although no known exploits are currently in the wild, the captured NTLMv2 hashes could be subjected to offline cracking or relay attacks, potentially leading to further compromise. European organizations using Newforma Project Center, especially in architecture, engineering, and construction sectors, face risks of credential theft and lateral movement. Mitigation requires network segmentation, SMB traffic monitoring, and strict access controls on the vulnerable service. Countries with significant adoption of Newforma products and critical infrastructure projects, such as Germany, UK, France, and the Netherlands, are likely most affected. Given the ease of exploitation and high impact on confidentiality, this vulnerability is rated high severity.
CVE-2025-35058 is a high-severity authentication bypass vulnerability in Newforma Project Center's Info Exchange (NIX) component. It allows a remote, unauthenticated attacker to trigger the NIX server to initiate an SMB connection to an attacker-controlled system, capturing the NTLMv2 hash of the service account used by NIX. This vulnerability stems from improper authentication validation (CWE-294) and does not require user interaction or prior authentication. Exploitation can lead to credential theft, enabling lateral movement or privilege escalation within affected environments. No known exploits are currently reported in the wild, but the vulnerability's nature and CVSS score of 8.2 indicate significant risk. European organizations using Newforma Project Center should prioritize patching or mitigating this issue to prevent potential compromise. Countries with strong adoption of Newforma products, especially in construction and project management sectors, are at higher risk. Immediate mitigation includes network segmentation, SMB traffic monitoring, and restricting outbound SMB connections from the NIX server.
CVE-2025-35057 is an authentication bypass vulnerability in Newforma Project Center's Info Exchange component. It allows a remote, unauthenticated attacker to trigger the application to initiate an SMB connection to an attacker-controlled server, capturing the NTLMv2 hash of the service account. This vulnerability stems from improper authentication controls (CWE-294) in the '/RemoteWeb/IntegrationServices.ashx' endpoint. Exploitation requires no user interaction and can lead to credential theft, potentially enabling lateral movement within networks. The CVSS 4.0 score is 6.0 (medium severity), reflecting the moderate impact and ease of exploitation with some privileges. European organizations using Newforma Project Center, especially in architecture, engineering, and construction sectors, should be vigilant. Mitigations include network segmentation, SMB traffic monitoring, and restricting outbound SMB connections.
Cognex In-Sight Explorer and In-Sight Camera Firmware expose
a proprietary protocol on TCP port 1069 to perform management operations
such as modifying system properties. The user management functionality
handles sensitive data such as registered usernames and passwords over
an unencrypted channel, allowing an adjacent attacker to intercept valid
credentials to gain access to the device.
A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Authentication. This issue affects Advanced Authentication on or before 6.5.0.
Dell OpenManage Network Integration, versions prior to 3.8, contains an Authentication Bypass by Capture-replay vulnerability in the RADIUS protocol. An attacker with local network access could potentially exploit this vulnerability to forge a valid protocol accept message in response to a failed authentication request.
Use of fixed learning codes, one code to lock the car and the other code to unlock it, in the Key Fob Transmitter in Cyclone Matrix TRF Smart Keyless Entry System, which allows a replay attack.
Research was completed on the 2024 KIA Soluto. Attack confirmed on other KIA Models in Ecuador.
Use of fixed learning codes, one code to lock the car and the other code to unlock it, the Key Fob Transmitter in KIA-branded Aftermarket Generic Smart Keyless Entry System, primarily distributed in Ecuador, which allows a replay attack.
Manufacture is unknown at the time of release. CVE Record will be updated once this is clarified.
Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.
This issue affects ANKA JPD-00028: before V.01.01.
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote attacker who has logged in illegally may be able to disclose or tamper with the programs and parameters in the modules.
CVE-2023-45794 is an authentication bypass vulnerability affecting Siemens Mendix Applications using Mendix versions prior to 10.4.0, as well as earlier Mendix 7, 8, and 9 versions below specified patch levels. The flaw arises from a capture-replay weakness in the platform's authentication mechanism, potentially allowing authenticated attackers to replay captured authentication tokens or requests. Exploitation can lead to unauthorized access or modification of application objects and privilege escalation within the affected app context. The vulnerability requires an attacker with some level of authenticated access, and exploitation does not require user interaction. The CVSS score is 6.8 (medium severity), reflecting network attack vector, low complexity, and partial privileges required. No known exploits are currently reported in the wild. European organizations using Mendix-based applications, especially in critical infrastructure or industrial sectors, should prioritize patching and reviewing access control models to mitigate risk.
