CVE-2025-34180 NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery
Attackers can recover the shared Gateway Key from client configuration files to gain unauthorized remote control of managed systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-34180?
CVE-2025-34180 is a high-severity vulnerability in NetSupport Software Manager, published on 15 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client configuration file can decode the stored value to recover the plaintext Gateway Key. Possession of the Gateway Key allows unauthorized access to NetSupport Manager connectivity services and enables remote control of systems managed through the same key.
Weakness: CWE-257
Which versions are affected by CVE-2025-34180?
How do I fix CVE-2025-34180?
No fix has been published for CVE-2025-34180 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-34180 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-34180 exists.
Sources
Also known as GHSA-635w-84xv-8jjv.