Reversible Encoding Vulnerability in NetSupport Manager by NetSupport

CVE-2025-34180

What is CVE-2025-34180?

A vulnerability exists in NetSupport Manager prior to version 14.12.0001, where a shared Gateway Key is utilized for authentication across its components. This key is stored using a reversible encoding method, making it susceptible to decoding. If an attacker gains access to a client configuration file, they can easily retrieve the plaintext Gateway Key. This compromise allows unauthorized individuals to access NetSupport Manager's connectivity services and remotely control systems under that key, posing significant security risks.

References