Threats Tagged 'cve-2025-35054'
View all threats tagged with 'cve-2025-35054'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-35054'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-35054 is a medium severity vulnerability in Newforma Project Center where sensitive credentials are stored insecurely in the Windows registry. Although the credentials are encrypted, the encryption key is stored alongside them, allowing any authenticated user with access to the registry location to retrieve both and decrypt the credentials. If these credentials are Active Directory accounts, attackers could leverage them to move laterally within an organization’s network and access additional systems and resources. The vulnerability affects all versions including 2024.3 and requires local authenticated access but no user interaction. No known exploits are currently reported in the wild. European organizations using Newforma Project Center should prioritize restricting registry access and consider credential rotation and monitoring to mitigate risk. Countries with significant construction, architecture, and engineering sectors using Newforma products are most likely to be impacted. The CVSS score of 5.3 reflects moderate risk due to the need for authenticated access and limited scope of exploitation. Join the discussion | CVE Database V5 | 10/09/2025, 20:20:40 UTC Added: 10/09/2025, 20:37:58 UTC |
Showing 1 to 1 of 1 result