{"cvss":0.0,"datePublished":"2025-06-02","dateUpdated":"2025-06-02","description":"ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.","dueDate":"2025-06-23","id":"CVE-2025-3935","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4 ;   https://nvd.nist.gov/vuln/detail/CVE-2025-3935","product":"ScreenConnect","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"ConnectWise ScreenConnect Improper Authentication Vulnerability","vendor":"ConnectWise"}