Read the docs
TI-2025-24329 Aliases CVE-2025-34180GHSA-635w-84xv-8jjv

NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery

Priority HIGH 70CWE-257Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client configuration file can decode the stored value to recover the plaintext Gateway Key. Possession of the Gateway Key allows unauthorized access to NetSupport Manager connectivity services and enables remote control of systems managed through the same key.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00181 7th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed Manager (NetSupport Software): 14.12.0001

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NetSupport SoftwareManagerbefore 14.12.000114.12.0001Patch availableCNA
  • Manager VendorNetSupport Software Affected before 14.12.0001 Fixed in 14.12.0001 Patch available CNA

Remediation

  • Fix · CNA Manager (NetSupport Software) Fixed in 14.12.0001

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    NetSupport Software Manager — kb.netsupportsoftware.com/knowledge-base/updating-and-secur…

    3 records Highest priority Priority HIGH 3 HIGH

    Other records, highest priority first

    • TI-2025-24328 NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File DisclosurePriority HIGH 79
    • TI-2025-24330 NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCEPriority HIGH 77
    Show all 3 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-34180
  2. 2026-10-03 Alias added: GHSA-635w-84xv-8jjv

References

Exploit 1

Patch 1

  • TI-2025-24328 NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File Disclosure CVSS 4.0HIGH 8.7
  • TI-2025-24330 NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCE CVSS 4.0HIGH 8.7
  • TI-2010-03938 NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences