Newforma Project Center 2024.3
Approved changes feed: RSS · Atom
cpe:2.3:a:newforma:project_center:2024.3:*:*:*:*:*:*:*
part: a version: 2024.3 update: *
| Vendor | Newforma (570ddfef-6be9-52a4-8457-d9e784e0d82f) |
|---|---|
| Product | Project Center (4c1dd293-282d-5cf3-af7c-61e03922d833) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-35051 |
vulnerable | 2026-06-08 07:20:59.859285 |
Newforma Project Center Server (NPCS) .NET unauthenticated deserialization
CRITICAL (9.8)
Newforma Project Center Server (NPCS) accepts serialized .NET data via the '/ProjectCenter.rem' endpoint on 9003/tcp, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. According to the recommended architecture, the vulnerable NPCS endpoint is only accessible on an internal network. To mitigate this vulnerability, restrict network access to NPCS.
Published: 2025-10-09T20:19:43.826Z
Updated: 2025-10-10T19:37:30.156Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35050 |
vulnerable | 2026-06-08 07:20:59.858695 |
Newforma Info Exchange (NIX) .NET unauthenticated deserialization
CRITICAL (9.8)
Newforma Info Exchange (NIX) accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. The vulnerable endpoint is used by Newforma Project Center Server (NPCS), so a compromised NIX system can be used to attack an associated NPCS system. To mitigate this vulnerability, restrict network access to the '/remoteweb/remote.rem' endpoint, for example using the IIS URL Rewrite Module.
Published: 2025-10-09T20:19:12.867Z
Updated: 2025-10-10T19:38:21.311Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.