CVE-2025-35054 — Newforma Info Exchange (NIX) insufficiently protected credentials
Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encr…
Published: 2025-10-09 · CVSS: 4.8 · CVSS 4.0
Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7