Skip to content
OpenAdvisories

Vendor

NetSupport Software

3 known vulnerabilities.

Products

Manager 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2025-34181

    NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCE

    NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write fil…

    NetSupport Software Manager
  • High 8.4
    CVE-2025-34180

    NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery

    NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client co…

    NetSupport Software Manager
  • High 8.7
    CVE-2025-34179

    NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File Disclosure

    NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. B…

    NetSupport Software Manager