Backdoor Vulnerability in NetSarang Xmanager and Related Products
CVE-2017-20203
Key Information:
- Vendor
Netsarang Computer, Inc.
- Vendor
- CVE Published:
- 9 October 2025
Badges
What is CVE-2017-20203?
NetSarang products, including Xmanager Enterprise and Xshell, contained a backdoor due to a malicious 'nssock2.dll' file that enabled attackers to gain unauthorized access. This file facilitated a multi-stage attack, leveraging DNS records to communicate with a command and control (C2) server. The compromised library allowed for arbitrary code execution, formation of an encrypted virtual file system, and persistent remote access, resulting in significant security risks such as data exfiltration. NetSarang has released fixed versions to mitigate this threat.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Xftp 5.0 Build 1218
Xlpd 5.0 Build 1220
Xmanager 5.0 Build 1045
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved