THREAT OPS › CVEs › CVE-2025-3935
CVE-2025-3935 — ConnectWise ScreenConnect Improper Authentication Vulnerability
ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.
Vulnerability details
- Affected productsScreenConnect
- KEV remediation due2025-06-23