Threats Tagged 'cve-2025-35058'
View all threats tagged with 'cve-2025-35058'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-35058'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-35058 is a high-severity authentication bypass vulnerability in Newforma Project Center's Info Exchange (NIX) component. It allows a remote, unauthenticated attacker to trigger the NIX server to initiate an SMB connection to an attacker-controlled system, capturing the NTLMv2 hash of the service account used by NIX. This vulnerability stems from improper authentication validation (CWE-294) and does not require user interaction or prior authentication. Exploitation can lead to credential theft, enabling lateral movement or privilege escalation within affected environments. No known exploits are currently reported in the wild, but the vulnerability's nature and CVSS score of 8.2 indicate significant risk. European organizations using Newforma Project Center should prioritize patching or mitigating this issue to prevent potential compromise. Countries with strong adoption of Newforma products, especially in construction and project management sectors, are at higher risk. Immediate mitigation includes network segmentation, SMB traffic monitoring, and restricting outbound SMB connections from the NIX server. Join the discussion | CVE Database V5 | 10/09/2025, 20:21:43 UTC Added: 10/09/2025, 20:37:58 UTC |
Showing 1 to 1 of 1 result