CVE-2025-34180

NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client configuration file can decode the stored value to recover the plaintext Gateway Key. Possession of the Gateway Key allows unauthorized access to NetSupport Manager connectivity services and enables remote control of systems managed through the same key.

CVSS

No CVSS.

References

Link	Resource
https://kb.netsupportsoftware.com/knowledge-base/updating-and-securing-netsupport-manager/
https://ret2.me/post/2025-12-04-exploiting-netsupport-gateway/
https://www.vulncheck.com/advisories/netsupport-manager-gateway-key-reversible-encoding-credential-recovery

Configurations

No configuration.

History

15 Dec 2025, 19:16

Type	Values Removed	Values Added
References		() https://ret2.me/post/2025-12-04-exploiting-netsupport-gateway/ -

15 Dec 2025, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-12-15 15:15

Updated : 2025-12-15 19:16

NVD link : CVE-2025-34180

Mitre link : CVE-2025-34180

CVE.ORG link : CVE-2025-34180

JSON object : View

Products Affected

No product.

CWE

CWE-257

Storing Passwords in a Recoverable Format

{"id": "CVE-2025-34180", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-12-15T15:15:49.727", "references": [{"url": "https://kb.netsupportsoftware.com/knowledge-base/updating-and-securing-netsupport-manager/", "source": "disclosure@vulncheck.com"}, {"url": "https://ret2.me/post/2025-12-04-exploiting-netsupport-gateway/", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/netsupport-manager-gateway-key-reversible-encoding-credential-recovery", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-257"}]}], "descriptions": [{"lang": "en", "value": "NetSupport Manager\u00a0< 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client configuration file can decode the stored value to recover the plaintext Gateway Key. Possession of the Gateway Key allows unauthorized access to NetSupport Manager connectivity services and enables remote control of systems managed through the same key."}], "lastModified": "2025-12-15T19:16:04.480", "sourceIdentifier": "disclosure@vulncheck.com"}