Read the docs
TI-2025-24330 Aliases CVE-2025-34181GHSA-w2fq-8jpx-5f27

NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCE

Priority HIGH 77CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write files to arbitrary locations on the server. This can be leveraged to place attacker-controlled DLLs or executables in privileged paths and achieve remote code execution in the context of the NetSupport Manager connectivity service.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01036 64th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed Manager (NetSupport Software): 14.12.0001

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NetSupport SoftwareManagerbefore 14.12.000114.12.0001Patch availableCNA
  • Manager VendorNetSupport Software Affected before 14.12.0001 Fixed in 14.12.0001 Patch available CNA

Remediation

  • Fix · CNA Manager (NetSupport Software) Fixed in 14.12.0001

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    NetSupport Software Manager — kb.netsupportsoftware.com/knowledge-base/updating-and-secur…

    3 records Highest priority Priority HIGH 3 HIGH

    Other records, highest priority first

    • TI-2025-24328 NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File DisclosurePriority HIGH 79
    • TI-2025-24329 NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential RecoveryPriority HIGH 70
    Show all 3 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-34181
  2. 2026-10-03 Alias added: GHSA-w2fq-8jpx-5f27

References

Exploit 1

Patch 1

  • TI-2025-24328 NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File Disclosure CVSS 4.0HIGH 8.7
  • TI-2025-24329 NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery CVSS 4.0HIGH 8.4
  • TI-2010-03938 NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences