RaqibCTI
CVE

CVE-2025-3935

P2
ConnectWise ScreenConnect Improper Authentication Vulnerability
ConnectWise · ScreenConnect
Date added (CISA)
2025-06-02
Remediation due
2025-06-23
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.

Source: NVD ↗ · CISA KEV Catalog ↗