Vulnerabilities

TI-2025-24330 CVE-2025-34181 · GHSA-w2fq-8jpx-5f27

NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCE

HIGH 77

NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01036 Published 2025-12-15 Fixed in 14.12.0001 CWE-22

TI-2025-24329 CVE-2025-34180 · GHSA-635w-84xv-8jjv

NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery

HIGH 70

NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00181 Published 2025-12-15 Fixed in 14.12.0001 CWE-257

TI-2025-24328 CVE-2025-34179 · GHSA-7jfx-h9gc-8r8r

NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File Disclosure

HIGH 79

NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00404 Published 2025-12-15 Fixed in 14.12.0001 CWE-89

Vulnerabilities

Filters

NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCE

NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery

NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File Disclosure