PT-2025-35330 · Netsupport · Netsupport Manager

Fabian Weber

·

Published

2025-08-29

·

Updated

2026-02-10

·

CVE-2025-34165

CVSS v4.0

8.8

High

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions NetSupport Manager versions prior to 14.12.0000
Description A stack-based buffer overflow exists in NetSupport Manager 14.x versions prior to 14.12.0000. This allows a remote, unauthenticated attacker to potentially cause a denial of service (DoS) or leak a limited amount of memory. A stack-based buffer overflow occurs when a program writes data beyond the allocated memory region on the stack, potentially overwriting adjacent data or control flow information.
Recommendations Update NetSupport Manager to version 14.12.0000 or later.

Fix

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-34165

Affected Products

Netsupport Manager