Vendors / NetSupport Software Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now NetSupport Software records in CISA KEV No NetSupport Software vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 79
NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00404 · Published 2025-12-15 · Fixed in 14.12.0001 CWE-89
Priority HIGH 77
NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01036 · Published 2025-12-15 · Fixed in 14.12.0001 CWE-22
Priority HIGH 70
NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components.
CVSS 4.0 HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00181 · Published 2025-12-15 · Fixed in 14.12.0001 CWE-257
Priority LOW 28
NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the netw…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02485 · Published 2010-11-05 · No fix listed CWE-310
Open these records in search → All records by CVSS severity
0 3 1 0 0
THREATIST.IORead the docs