CVE-2025-34181
High
Description
NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write files to arbitrary locations on the server. This can be leveraged to place attacker-controlled DLLs or executables in privileged paths and achieve remote code execution in the context of the NetSupport Manager connectivity service.
SeverityHigh
CVSS8.7
Exploit probability—
ProductManager
PublishedDec 15, 2025
First seenDec 15, 2025
Weakness typeCWE-22Path traversal
How to fix
Update
- NetSupport Software Manager14.12.0001 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| NetSupport Software Manager | v < 14.12.0001 | 14.12.0001 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.