Threats Tagged 'cve-2025-35061'

CVE-2025-35061 is a high-severity authentication bypass vulnerability in Newforma Project Center's Info Exchange (NIX) component. It allows a remote, unauthenticated attacker to trigger the system to initiate an SMB connection to an attacker-controlled server, capturing the NTLMv2 hash of the NIX service account. This vulnerability stems from improper authentication validation (CWE-294) in the LegacyIntegrationServices.asmx endpoint. Exploitation does not require user interaction or prior authentication, making it highly accessible. Although no known exploits are currently in the wild, the captured NTLMv2 hashes could be subjected to offline cracking or relay attacks, potentially leading to further compromise. European organizations using Newforma Project Center, especially in architecture, engineering, and construction sectors, face risks of credential theft and lateral movement. Mitigation requires network segmentation, SMB traffic monitoring, and strict access controls on the vulnerable service. Countries with significant adoption of Newforma products and critical infrastructure projects, such as Germany, UK, France, and the Netherlands, are likely most affected. Given the ease of exploitation and high impact on confidentiality, this vulnerability is rated high severity.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2025-35061#cwe-294