CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects Exchange. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-35054
Severity
MEDIUM
CVSS
5.3
EPSS
0.07%
Exchange
Original NVD Description
Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.
Related CVEs
Other vulnerabilities affecting the same vendor(s)