VULNERABILITY INTELLIGENCE

CVE-2025-35054

CVSS score5.3 MEDIUM
EPSS probability0.08%
CISA KEVNot currently listed
Published2025-10-09
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-257

Primary references