CVE-2024-32499CWE-94

Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed

Medium · published April 28, 2025

CVSS v3.1
4.9
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00482 · 40.6th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-04-28T00:00Z
EPSS history
Timeline
  • 28 APR 00:00Z
    Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed
    cvelistv5